CVE-2017-1520

Description

IBM DB2 9.7, 10,1, 10.5, and 11.1 is vulnerable to an unauthorized command that allows the database to be activated when authentication type is CLIENT. IBM X-Force ID: 129830.

Risk Information

Base Score

3.7

MODERATE

Vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

EPSS Score

Exploitation Probability

0.199

Associated Vulnerability

Vulnerability	OS Platform
Multiple vulnerabilities affected in DB2 11.1.0.0	Windows
Multiple Vulnerabilities are affected in DB2 10.1.0.3	Windows
Multiple Vulnerabilities are affected in DB2 10.5.0.3	Windows
Multiple Vulnerabilities are affected in DB2 9.7	Windows
Multiple Vulnerabilities are affected in DB2 9.7.0.9	Windows

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234