Description
IBM Data Server Driver for JDBC and SQLJ (IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.1) deserializes the contents of /tmp/connlicj.bin which leads to object injection and potentially arbitrary code execution depending on the classpath. IBM X-Force ID: 133999.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| IBM | DB2 for Linux, UNIX and Windows | 10.5, 10.1, 9.7, 11.1 | — |