CVEvulnerability

CVE-2023-27558

7.8 HIGH Published 2023-07-10 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-07-10
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.4 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-269

Description

IBM Db2 on Windows 10.5, 11.1, and 11.5 may be vulnerable to a privilege escalation caused by at least one installed service using an unquoted service path. A local attacker could exploit this vulnerability to gain elevated privileges by inserting an executable file in the path of the affected service. IBM X-Force ID: 249194.

Affected configurations

• ibm db2 10.5.0.11 • ibm db2 11.1.4.7 • ibm db2 11.5

Related

Weakness · CWE (1)

  • CWE-269 Improper Privilege Management weakness

References