medium4.4
CVE-2020-4976
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local user to read and write specific files due…
Impact
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local user to read and write specific files due to weak file permissions. IBM X-Force ID: 192469.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Db2 | from 11.1.0.0 before 11.1.4.6 from 11.5 before 11.5.5.0 Versions 9.7, 10.1, 10.5 |
| Netapp | Oncommand Insight | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- https://exchange.xforce.ibmcloud.com/vulnerabilities/192469
- https://security.netapp.com/advisory/ntap-20210409-0003/
- https://www.ibm.com/support/pages/node/6427859
- https://exchange.xforce.ibmcloud.com/vulnerabilities/192469
- https://security.netapp.com/advisory/ntap-20210409-0003/
- https://www.ibm.com/support/pages/node/6427859