Skip to content
Sign in
5.1 Medium

CVE-2020-4976 IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local…

Description

IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local user to read and write specific files due to weak file permissions. IBM X-Force ID: 192469.

Affected products and versions

Product Affected versions Fixed in
DB2 for Linux, UNIX and Windows 11.5 No fix stated
DB2 for Linux, UNIX and Windows 11.1 No fix stated
DB2 for Linux, UNIX and Windows 10.5 No fix stated
DB2 for Linux, UNIX and Windows 10.1 No fix stated
DB2 for Linux, UNIX and Windows 9.7 No fix stated

Other CVEs of DB2 for Linux, UNIX and Windows

The 168 CVEs of DB2 for Linux, UNIX and Windows →
CVE-2025-36247 IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5.0 through 11.5.9 and 12.1.0 through 12.1.3 is… 7.1 High CVE-2025-36425 IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5.0 through 11.5.9 and 12.1.0 through 12.1.3… 5.3 Medium CVE-2025-13867 IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5.0 through 11.5.9 and 12.1.0… 6.5 Medium CVE-2025-14689 IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 12.1.0 through 12.1.3 could allow an authenticated… 6.5 Medium
Track this CVE