CVE-2018-1634

IBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local user logged in with database administrator user to gain root privileges through a symbolic link vulnerability in infos.DBSERVERNAME. IBM X-Force ID: 144437.

Score

CVSS 3.0 8.2 High

Status

Modified - psirt@us.ibm.com

Published

2019-08-20

Last modified

2024-09-16

Weaknesses

CWE-59

Affected products

• Informix Dynamic Server (Ibm)
• Informix Dynamic Server Enterprise Edition (Ibm)

References

• http://www.ibm.com/support/docview.wss?uid=ibm10964987
• https://exchange.xforce.ibmcloud.com/vulnerabilities/144437
• https://security.netapp.com/advisory/ntap-20190903-0002/