PT-2019-9297 · Ibm · Ibm Informix Dynamic Server Enterprise Edition
CVE-2018-1633
·
Publicado
2019-08-20
·
Atualizado
2023-02-24
CVSS v3.1
8.2
Alta
| Vetor | A:H/AV:L/PR:H/C:H/I:H/AC:L/S:C/UI:N |
Name of the Vulnerable Software and Affected Versions
IBM Informix Dynamic Server Enterprise Edition version 12.1
Description
A symbolic link vulnerability in onsrvapd could allow a local user logged in with database administrator privileges to gain root privileges.
Recommendations
For IBM Informix Dynamic Server Enterprise Edition version 12.1, consider restricting access to the onsrvapd service to minimize the risk of exploitation until a patch is available.
Correção
Link Following
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Ibm Informix Dynamic Server Enterprise Edition