Skip to content
OpenAdvisories
Medium · 5.1 CVE-2020-4976 EUVD-2020-26223GHSA-4vvw-cw7c-jq92

IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local user to read and writ…

Published Mar 11, 2021 · Updated Sep 16, 2024 · Assigned by ibm

Vendor: IBM Product: DB2 for Linux, UNIX and Windows Platform: Linux Platform: Windows

Description

IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local user to read and write specific files due to weak file permissions. IBM X-Force ID: 192469.

Affected products

VendorProductAffectedFixed
IBM DB2 for Linux, UNIX and Windows 10.5, 10.1, 9.7, 11.1, 11.5 —

References