6.2
Medium
CVE-2020-4387 IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local…
Description
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local user to obtain sensitive information using a race condition of a symbolic link. IBM X-Force ID: 179269.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| DB2 for Linux- UNIX and Windows | 11.5 | No fix stated |
| DB2 for Linux- UNIX and Windows | 11.1 | No fix stated |
| DB2 for Linux- UNIX and Windows | 10.5 | No fix stated |
| DB2 for Linux- UNIX and Windows | 10.1 | No fix stated |
| DB2 for Linux- UNIX and Windows | 9.7 | No fix stated |
Other CVEs of DB2 for Linux- UNIX and Windows
The 13 CVEs of DB2 for Linux- UNIX and Windows →
CVE-2021-29702
Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1.4 and 11.5.5 is vulnerable to a denial of service…
7.5
High
CVE-2020-4642
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow local…
6.2
Medium
CVE-2020-4420
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow an…
7.5
High
CVE-2020-4414
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local…
5.1
Medium