CVE-2018-1634

CVSS 8.2 HIGHEPSS 0.4%

Vexday Risk Score

21Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS 8.2EPSS 0.4%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

20 Aug 2019Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

IBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local user logged in with database administrator user to gain root privileges through a symbolic link vulnerability in infos.DBSERVERNAME. IBM X-Force ID: 144437.

CVSS:3.0/AV:L/A:H/S:C/UI:N/AC:L/I:H/C:H/PR:H/RL:O/RC:C/E:U

Affected products

IBM · Informix Dynamic Server Enterprise Edition

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/144437 https://security.netapp.com/advisory/ntap-20190903-0002/http://www.ibm.com/support/docview.wss?uid=ibm10964987