IBM Db2 on Windows 10.5, 11.1, and 11.5 may be vulnerable to a privilege escalation caused by at least one installed service using an unquoted service path. A local attacker could exploit this vulnerability to gain elevated privileges by inserting an executable file in the path of the affected service. IBM X-Force ID: 249194.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
ibm db2 10.5.0.11 |
||
ibm db2 11.1.4.7 |
||
ibm db2 11.5 |
Vulmon