CVE-2021-29678

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a user with DBADM authority to access other…

High · published December 9, 2021

CVSS v3.0
8.7
EPSS
1%
Percentile
66.1
In the wild
Unconfirmed
What it is

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a user with DBADM authority to access other databases and read or modify files. IBM X-Force ID: 199914.

The record
Technical detail
CVSS v3.0
8.7 · HIGH
Vector
CVSS:3.0/C:H/PR:H/S:C/AV:N/I:H/AC:L/UI:N/A:N/RC:C/E:U/RL:O
CVSS v4.0
Not supplied
EPSS
0.01127 · 66.1th percentile
Published
2021-12-09T17:00Z
EPSS history
Timeline
  • 09 DEC 17:00Z
    IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a user with DBADM authority to access other…
    cvelistv5