PT-2019-9295 · Ibm · Ibm Informix Dynamic Server Enterprise Edition
CVE-2018-1631
·
Publicado
2019-08-20
·
Atualizado
2023-02-24
CVSS v3.1
8.2
Alta
| Vetor | I:H/PR:H/C:H/AC:L/UI:N/S:C/AV:L/A:H |
Name of the Vulnerable Software and Affected Versions
IBM Informix Dynamic Server Enterprise Edition version 12.1
Description
The issue allows a local user logged in with database administrator privileges to gain root privileges through a symbolic link vulnerability in oninit mongohash.
Recommendations
For IBM Informix Dynamic Server Enterprise Edition version 12.1, consider restricting access to the oninit mongohash functionality to minimize the risk of exploitation until a patch is available.
Correção
Link Following
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Ibm Informix Dynamic Server Enterprise Edition