CVE-2019-4057 — IBM DB2 vulnerability

3 documents3 sources
Severity
6.7MEDIUMNVD
EPSS
0.1%
top 79.55%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM DB2
Timeline
PublishedJul 1
Latest updateMay 24

Description

IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 could allow malicious user with access to the DB2 instance account to leverage a fenced execution process to execute arbitrary code as root. IBM X-Force ID: 156567.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HExploitability: 0.8 | Impact: 5.9

Affected Packages1 packages

▶NVDibm/db235 versions+34

🔴Vulnerability Details

2
GHSA
GHSA-3m9x-7phq-w66g: IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9↗2022-05-24
▶
CVEList
CVE-2019-4057: IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9↗2019-07-01
▶
CVE-2019-4057 — IBM DB2 vulnerability | cvebase