Arbitrary Code Execution Vulnerability in IBM DB2 High Performance Unload

CVE-2019-4606

What is CVE-2019-4606?

A vulnerability exists in IBM DB2 High Performance Unload for LUW 6.1 and 6.5, where a local attacker can exploit an untrusted search path to execute arbitrary code. This can occur when an attacker utilizes a specially crafted executable file, leading to potential system compromise. Organizations using this software should take immediate action to mitigate the risk by applying necessary security updates and evaluating their system’s integrity.

References