CVE-2018-1487

CVSS 8.4 HIGHEPSS 0.4%

Vexday Risk Score

21Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS 8.4EPSS 0.4%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

10 jul 2018Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5 and 11.1 binaries load shared libraries from an untrusted path potentially giving low privilege users full access to the DB2 instance account by loading a malicious shared library. IBM X-Force ID: 140972.

CVSS:3.0/A:H/AC:L/AV:L/C:H/I:H/PR:N/S:U/UI:N/E:U/RC:C/RL:O

Productos afectados

IBM · DB2 for Linux, UNIX and Windows

Referencias

https://exchange.xforce.ibmcloud.com/vulnerabilities/140972 http://www.ibm.com/support/docview.wss?uid=swg22016505 http://www.securitytracker.com/id/1041231