CVE-2020-4945: IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 could allow an authenticated user to overwrite arbirary files due to improper group…

high8.1CVSS 3.1

AVNACLPRLUINSUCNIHAH

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 could allow an authenticated user to overwrite arbirary files due to improper group permissions. IBM X-Force ID: 191945.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
ibm	db2	—	—
ibm	db2_for_linux_and_unix	—	—

CVSS provenance

nvdv3.18.1HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

osv4.4MEDIUM