cbcvebase.
CVE-2023-27558
published 2023-07-10

CVE-2023-27558: IBM Db2 on Windows 10.5, 11.1, and 11.5 may be vulnerable to a privilege escalation caused by at least one installed service using an unquoted service path. A…

high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
IBM Db2 on Windows 10.5, 11.1, and 11.5 may be vulnerable to a privilege escalation caused by at least one installed service using an unquoted service path. A local attacker could exploit this vulnerability to gain elevated privileges by inserting an executable file in the path of the affected service. IBM X-Force ID: 249194.

Affected

4 ranges
VendorProductVersion rangeFixed in
ibmdb2——
ibmdb2——
ibmdb2——
ibmdb2_for_windows——