CVE-2018-1632

CVSS 8.2 HIGHEPSS 0.4%

Vexday Risk Score

21Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS 8.2EPSS 0.4%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

20 Aug 2019Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

IBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local user logged in with database administrator user to gain root privileges through a symbolic link vulnerability in .infxdirs. IBM X-Force ID: 144432.

CVSS:3.0/UI:N/S:C/AC:L/C:H/PR:H/I:H/A:H/AV:L/RL:O/RC:C/E:U

Affected products

IBM · Informix Dynamic Server Enterprise Edition

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/144432 https://security.netapp.com/advisory/ntap-20190903-0002/http://www.ibm.com/support/docview.wss?uid=ibm10964987