CVSS: 4.7EPSS: 0%CPEs: 4EXPL: 0CVE-2017-1434
https://notcve.org/view.php?id=CVE-2017-1434
IBM DB2 for Linux, UNIX and Windows 11.1 (includes DB2 Connect Server) under unusual circumstances, could expose highly sensitive information in the error log to a local user. IBM DB2 para Linux, UNIX y Windows 11.1 (incluye DB2 Connect Server), bajo circunstancias no habituales, podría exponer información altamente sensible a un usuario local mediante el registro de errores. • http://www.ibm.com/support/docview.wss?uid=swg22005740 http://www.securityfocus.com/bid/100693 http://www.securitytracker.com/id/1039297 https://exchange.xforce.ibmcloud.com/vulnerabilities/127806 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 7.8EPSS: 0%CPEs: 58EXPL: 0CVE-2017-1451
https://notcve.org/view.php?id=CVE-2017-1451
IBM DB2 for Linux, UNIX and Windows 9.7, 10,1, 10.5, and 11.1 (includes DB2 Connect Server) could allow a local user with DB2 instance owner privileges to obtain root access. IBM X-Force ID: 128178. IBM DB2 para Linux, UNIX y Windows 9.7, 10,1, 10.5 y 11.1 (incluido DB2 Connect Server) podría permitir a un usuario local con privilegios de propietario en la instancia DB2 obtener acceso root. IBM X-Force ID: 128178. • http://www.ibm.com/support/docview.wss?uid=swg22006061 http://www.securityfocus.com/bid/100690 http://www.securitytracker.com/id/1039301 https://exchange.xforce.ibmcloud.com/vulnerabilities/128178 •
CVSS: 7.8EPSS: 0%CPEs: 58EXPL: 0CVE-2017-1452
https://notcve.org/view.php?id=CVE-2017-1452
IBM DB2 for Linux, UNIX and Windows 9.7, 10,1, 10.5, and 11.1 (includes DB2 Connect Server) could allow a local user to obtain elevated privilege and overwrite DB2 files. IBM X-Force ID: 128180. IBM DB2 para Linux, UNIX y Windows 9.7, 10,1, 10.5 y 11.1 (incluido DB2 Connect Server) podría permitir a un usuario local obtener privilegios elevados y sobrescribir archivos DB2.. IBM X-Force ID: 128180. • http://www.ibm.com/support/docview.wss?uid=swg22006109 http://www.securityfocus.com/bid/100698 http://www.securitytracker.com/id/1039299 https://exchange.xforce.ibmcloud.com/vulnerabilities/128180 •
CVSS: 4.3EPSS: 0%CPEs: 58EXPL: 0CVE-2017-1520
https://notcve.org/view.php?id=CVE-2017-1520
IBM DB2 9.7, 10,1, 10.5, and 11.1 is vulnerable to an unauthorized command that allows the database to be activated when authentication type is CLIENT. IBM X-Force ID: 129830. IBM DB2 9.7, 10,1, 10.5 y 11.1 es vulnerable a que se ejecute un comando no autorizado que permita activar la base de datos cuando la autenticación es de tipo CLIENT. IBM X-Force ID: 129830. • http://www.ibm.com/support/docview.wss?uid=swg22007186 http://www.securityfocus.com/bid/100684 http://www.securitytracker.com/id/1039308 https://exchange.xforce.ibmcloud.com/vulnerabilities/129830 • CWE-287: Improper Authentication •
CVSS: 7.3EPSS: 0%CPEs: 246EXPL: 0CVE-2016-5995
https://notcve.org/view.php?id=CVE-2016-5995
Untrusted search path vulnerability in IBM DB2 9.7 through FP11, 10.1 through FP5, 10.5 before FP8, and 11.1 GA on Linux, AIX, and HP-UX allows local users to gain privileges via a Trojan horse library that is accessed by a setuid or setgid program. Vulnerabilidad de ruta de búsqueda no confiable en IBM DB2 9.7 hasta la versión FP11, 10.1 hasta la versión FP5, 10.5 en versiones anteriores a FP8 y 11.1 GA en Linux, AIX y HP-UX permite a usuarios locales obtener privilegios a través de una librería troyanizada a la que se accede mediante un programa setuid o setgid. • http://www-01.ibm.com/support/docview.wss?uid=swg1IT16921 http://www-01.ibm.com/support/docview.wss?uid=swg1IT17010 http://www-01.ibm.com/support/docview.wss?uid=swg1IT17011 http://www-01.ibm.com/support/docview.wss?uid=swg1IT17012 http://www-01.ibm.com/support/docview.wss? • CWE-264: Permissions, Privileges, and Access Controls •