CVE-2018-1633

IBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local user logged in with database administrator user to gain root privileges through a symbolic link vulnerability in onsrvapd. IBM X-Force ID: 144434.

Score

CVSS 3.0 8.2 High

Status

Modified - psirt@us.ibm.com

Published

2019-08-20

Last modified

2024-09-16

Weaknesses

CWE-59

Affected products

• Informix Dynamic Server (Ibm)
• Informix Dynamic Server Enterprise Edition (Ibm)

References

• http://www.ibm.com/support/docview.wss?uid=ibm10964987
• https://exchange.xforce.ibmcloud.com/vulnerabilities/144434
• https://security.netapp.com/advisory/ntap-20190903-0002/