PT-2012-4650
CVE-2012-3324
·
تاريخ النشر
2012-09-25
·
تاريخ التحديث
2017-08-29
الوصف من
CVSS 2.0
9.0
عاليةالمقاييسAV:N/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
IBM DB2 and DB2 Connect version 10.1 before FP1
Description
A directory traversal issue exists in the UTL FILE module, allowing remote authenticated users to access arbitrary files by manipulating the pathname in the
file field. This could lead to modification, deletion, or reading of files outside the intended directory.Recommendations
For IBM DB2 and DB2 Connect version 10.1 before FP1, apply Fix Pack 1 to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾