4.3 MEDIUM
- CVSS version (CVSS): 3.1
- Attack Vector (AV): Network (N)
- Attack Complexity (AC): Low (L)
- Privileges Required (PR): Low (L)
- User Interaction (UI): None (N)
- Scope (S): Unchanged (U)
- Confidentiality (C): Low (L)
- Integrity (I): None (N)
- Availability (A): None (N)
- Modified Attack Vector (MAV): Network (N)
- Modified Attack Complexity (MAC): Low (L)
- Modified Privileges Required (MPR): Low (L)
- Modified User Interaction (MUI): None (N)
- Modified Confidentiality (MC): Low (L)
- Modified Scope (MS): Unchanged (U)
- Modified Integrity (MI): None (N)
- Modified Availability (MA): None (N)
Activity log
- Created suggestion
IBM® Db2® is affected by an improper authorization vulnerability in the certain command, allowing a non-privileged user to bypass authority checks and modify database catalog data.
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is affected by an improper authorization vulnerability in the certain command, allowing a non-privileged user to bypass authority checks and modify database catalog data.
References
Affected products
- =<11.5.9
- =<12.1.5
Matching in nixpkgs
pkgs.pdb2pqr
Software for determining titration states, adding missing atoms, and assigning charges/radii to biomolecules
pkgs.influxdb2
None
pkgs.influxdb2-provision
Small utility to help provisioning influxdb2
pkgs.python313Packages.pdb2pqr
Software for determining titration states, adding missing atoms, and assigning charges/radii to biomolecules
pkgs.python314Packages.pdb2pqr
Software for determining titration states, adding missing atoms, and assigning charges/radii to biomolecules
pkgs.influxdb2-token-manipulator
Utility program to manipulate influxdb api tokens for declarative setups
pkgs.gnatPackages.gnatcoll-db2ada
GNAT Components Collection - Database packages
pkgs.gnat13Packages.gnatcoll-db2ada
GNAT Components Collection - Database packages
pkgs.gnat14Packages.gnatcoll-db2ada
GNAT Components Collection - Database packages
pkgs.gnat15Packages.gnatcoll-db2ada
GNAT Components Collection - Database packages
Package maintainers
-
@sternenseemann Lukas Epple <sternenseemann@systemli.org>
-
@oddlama oddlama <oddlama@oddlama.org>
-
@natsukium Tomoya Otabi <nixpkgs@natsukium.com>