Local Privilege Escalation in IBM Informix Dynamic Server
CVE-2018-1796

7.8HIGH

Key Information:

Vendor

IBM
Status
Informix Dynamic Server Enterprise Edition
Vendor
CVE Published:
20 August 2019

What is CVE-2018-1796?

IBM Informix Dynamic Server Enterprise Edition 12.1 is susceptible to a vulnerability that enables local users to load malicious libraries, potentially granting them root privileges. Attackers could exploit this flaw to execute code with elevated permissions, posing significant security risks to systems running affected versions. For more information, refer to IBM's official documentation and security advisories.

Affected Version(s)

Informix Dynamic Server Enterprise Edition 12.1

References

http://www.ibm.com/support/docview.wss?uid=ibm10964987
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/149426
vdb-entryx_refsource_XF

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.