3.5

CVE-2017-1150

IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.1, 10.5, and 11.1 could allow an authenticated attacker with specialized access to tables that they should not be permitted to view. IBM Reference #: 1999515.

Data is provided by the National Vulnerability Database (NVD)
Ibm ≫ Db2 Version10.1
Ibm ≫ Db2 Version10.1 SwEditionadvanced_enterprise
Ibm ≫ Db2 Version10.1 SwEditionadvanced_workgroup
Ibm ≫ Db2 Version10.1 SwEditionenterprise
Ibm ≫ Db2 Version10.1 SwEditionexpress
Ibm ≫ Db2 Version10.1 SwEditionworkgroup
Ibm ≫ Db2 Version10.5
Ibm ≫ Db2 Version10.5 SwEditionadvanced_enterprise
Ibm ≫ Db2 Version10.5 SwEditionadvanced_workgroup
Ibm ≫ Db2 Version10.5 SwEditionenterprise
Ibm ≫ Db2 Version10.5 SwEditionexpress
Ibm ≫ Db2 Version10.5 SwEditionworkgroup
Ibm ≫ Db2 Version11.1
Ibm ≫ Db2 Version11.1 SwEditionadvanced_enterprise
Ibm ≫ Db2 Version11.1 SwEditionadvanced_workgroup
Ibm ≫ Db2 Version11.1 SwEditionenterprise
Ibm ≫ Db2 Version11.1 SwEditionexpress
Ibm ≫ Db2 Version11.1 SwEditionworkgroup
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.16% 0.333
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 3.1 1.6 1.4
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
nvd@nist.gov 3.5 6.8 2.9
AV:N/AC:M/Au:S/C:P/I:N/A:N
CWE-269 Improper Privilege Management

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.