CVE-2019-4606

IBM DB2 High Performance Unload load for LUW 6.1 and 6.5 could allow a local attacker to execute arbitrary code on the system, caused by an untrusted search…

High · published December 12, 2019

CVSS v3.0
7.4
EPSS
0%
Percentile
35.6
In the wild
Unconfirmed
What it is

IBM DB2 High Performance Unload load for LUW 6.1 and 6.5 could allow a local attacker to execute arbitrary code on the system, caused by an untrusted search path vulnerability. By using a executable file, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 168298.

The record
Technical detail
CVSS v3.0
7.4 · HIGH
Vector
CVSS:3.0/AC:H/PR:N/A:H/S:U/UI:N/I:H/AV:L/C:H/RC:C/E:U/RL:O
CVSS v4.0
Not supplied
EPSS
0.00424 · 35.6th percentile
Published
2019-12-12T16:30Z
EPSS history
Timeline
  • 12 DEC 16:30Z
    IBM DB2 High Performance Unload load for LUW 6.1 and 6.5 could allow a local attacker to execute arbitrary code on the system, caused by an untrusted search…
    cvelistv5