← Back

CVE-2026-13367

nvd nist
Published: Aug 12, 2026Modified: Aug 18, 2026

JSON object

Loading...
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: psirt@us.ibm.com (Secondary)

Description

IBM Informix Dynamic Server 14.10, and 15.0 contain a local privilege escalation vulnerability in the oninit setuid-root utility.

Affected (2)

Ibm
1 product
Informix Dynamic Server
Configuration A
2 vulnerable · 8 platform
Vulnerable SoftwareAffected Versions
Ibm
Informix Dynamic Server
Version 14.10
Informix Dynamic Server
Version 15.0
Running on/withPlatform Versions
Canonical
Ubuntu Linux
All versions
Hp
Hp Ux
All versions
Ibm
Aix
All versions
Ibm
Linux On Ibm Z
All versions
Linux
Linux Kernel
All versions
Novell
Suse Linux
All versions
Oracle
Solaris
All versions
Redhat
Desktop
All versions

Related CWEs

CWE-284
Improper Access Control
The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

References (1)

Source: psirt@us.ibm.com
Vendor Advisory

Timeline

No history available yet.