NetSight
medium6.3

CVE-2023-27866

IBM Informix JDBC Driver 4.10 and 4.50 is susceptible to remote code execution attack via JNDI injection when driver code or the application using the driver d…

Impact

IBM Informix JDBC Driver 4.10 and 4.50 is susceptible to remote code execution attack via JNDI injection when driver code or the application using the driver do not verify supplied LDAP URL in Connect String. IBM X-Force ID: 249511.

Affected products

VendorProductAffected versions
IbmInformix Jdbc Driver
from 4.50.0 before 4.50.10
Version 4.10

Weakness classification

References