critical9.8Public exploit code
CVE-2017-1092
IBM Informix Open Admin Tool 11.5, 11.7, and 12.1 could allow an unauthorized user to execute arbitrary code as system admin on Windows servers.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- IBM OpenAdmin Tool - SOAP welcomeServer PHP Code Execution (Metasploit)2017-08-22 · remote · php · Verified
- IBM Informix Dynamic Server / Informix Open Admin Tool - DLL Injection / Remote Code Execution / Heap Buffer Overflow2017-05-30 · webapps · windows · Verified
Impact
IBM Informix Open Admin Tool 11.5, 11.7, and 12.1 could allow an unauthorized user to execute arbitrary code as system admin on Windows servers. IBM X-Force ID: 120390.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Informix Open Admin Tool | Versions 11.5, 11.7, 12.1 |
References
- NVD record
- CVE.org record
- http://www.ibm.com/support/docview.wss?uid=swg22002897
- https://www.exploit-db.com/exploits/42091/
- https://www.exploit-db.com/exploits/42541/
- http://www.ibm.com/support/docview.wss?uid=swg22002897
- https://www.exploit-db.com/exploits/42091/
- https://www.exploit-db.com/exploits/42541/