CVE-2019-4606

Published: Dec 12, 2019Modified: Nov 21, 2024

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

IBM DB2 High Performance Unload load for LUW 6.1 and 6.5 could allow a local attacker to execute arbitrary code on the system, caused by an untrusted search path vulnerability. By using a executable file, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 168298.

Affected (8)

Products: Ibm: Db2 High Performance Unload Load

Ibm

1 product

Db2 High Performance Unload Load

Configuration A

8 vulnerable · 3 platform

Vulnerable Software	Affected Versions
Ibm Db2 High Performance Unload Load	Version 5.1.0.0
Ibm Db2 High Performance Unload Load	Version 5.1.0.1
Ibm Db2 High Performance Unload Load	Version 6.1.0.0
Ibm Db2 High Performance Unload Load	Version 6.1.0.1
Ibm Db2 High Performance Unload Load	Version 6.1.0.2
Ibm Db2 High Performance Unload Load	Version 6.1.0.3
Ibm Db2 High Performance Unload Load	Version 6.5.0.0
Ibm Db2 High Performance Unload Load	Version 6.5.0.0 if1