Description
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 contains a vulnerability in db2cacpy that could allow a local user to read any file on the system. IBM X-Force ID: 145502.
References
- 1041671 vdb-entry
- 105395 vdb-entry
- ibm-db2-cve20181685-info-disc(145502) vdb-entry
- https://www.ibm.com/support/docview.wss?uid=ibm10729979