CVE-2010-3194 — IBM DB2 vulnerability

CWE-2643 documents3 sources
Severity
7.5HIGHNVD
EPSS
0.9%
top 23.73%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM DB2
Timeline
PublishedAug 31
Latest updateMay 17

Description

The DB2DART program in IBM DB2 9.1 before FP9, 9.5 before FP6, and 9.7 before FP2 allows attackers to bypass intended file access restrictions via unspecified vectors related to overwriting files owned by an instance owner.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages1 packages

▶NVDibm/db29.1, 9.5, 9.7+2

🔴Vulnerability Details

2
GHSA
GHSA-83wc-mfqp-gw6h: The DB2DART program in IBM DB2 9↗2022-05-17
▶
CVEList
CVE-2010-3194: The DB2DART program in IBM DB2 9↗2010-08-31
▶
CVE-2010-3194 — IBM DB2 vulnerability | cvebase