Ibm Db2 For Linux And Unix vulnerabilities

2 known vulnerabilities affecting ibm/db2_for_linux_and_unix.

Total CVEs

2

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2020-4945HIGHCVSS 8.1v11.52021-06-24

CVE-2020-4945 [HIGH] CWE-732 CVE-2020-4945: IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 could allow an authenticated IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 could allow an authenticated user to overwrite arbirary files due to improper group permissions. IBM X-Force ID: 191945.

CVE-2020-4885MEDIUMCVSS 4.7v11.52021-06-24

CVE-2020-4885 [MEDIUM] CWE-59 CVE-2020-4885: IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 could allow a local user to a IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 could allow a local user to access and change the configuration of Db2 due to a race condition of a symbolic link,. IBM X-Force ID: 190909.