CVE-2018-1781
09.11.2018, 01:29
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 could allow a local user to obtain root access by exploiting a symbolic link attack to read/write/corrupt a file that they originally did not have permission to access. IBM X-Force ID: 148804.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| ibm | db2 | 9.7 |
| ibm | db2 | 10.1 |
| ibm | db2 | 10.5 |
| ibm | db2 | 11.1 |
𝑥
= Vulnerable software versions
References