CVE-2018-1631

CVSS 8.2 HIGHEPSS 0.4%

Vexday Risk Score

21Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS 8.2EPSS 0.4%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

20 Aug 2019Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

IBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local user logged in with database administrator user to gain root privileges through a symbolic link vulnerability in oninit mongohash. IBM X-Force ID: 144431.

CVSS:3.0/I:H/PR:H/C:H/AC:L/UI:N/S:C/AV:L/A:H/E:U/RL:O/RC:C

Affected products

IBM · Informix Dynamic Server Enterprise Edition

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/144431 https://security.netapp.com/advisory/ntap-20190903-0002/http://www.ibm.com/support/docview.wss?uid=ibm10964987