CVE-2018-1802

IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 binaries load shared libraries from an untrusted path potentially…

High · published November 9, 2018

CVSS v3.0
8.4
EPSS
0%
Percentile
37.4
In the wild
Unconfirmed
What it is

IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 binaries load shared libraries from an untrusted path potentially giving low privilege user full access to the DB2 instance account by loading a malicious shared library. IBM X-Force ID: 149640.

The record
Technical detail
CVSS v3.0
8.4 · HIGH
Vector
CVSS:3.0/A:H/AC:L/AV:L/C:H/I:H/PR:N/S:U/UI:N/E:U/RC:C/RL:O
CVSS v4.0
Not supplied
EPSS
0.00445 · 37.4th percentile
Published
2018-11-09T00:00Z
EPSS history
Timeline
  • 09 NOV 00:00Z
    IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 binaries load shared libraries from an untrusted path potentially…
    cvelistv5