7.8 HIGH
- CVSS version (CVSS): 3.1
- Attack Vector (AV): Local (L)
- Attack Complexity (AC): Low (L)
- Privileges Required (PR): Low (L)
- User Interaction (UI): None (N)
- Scope (S): Unchanged (U)
- Confidentiality (C): High (H)
- Integrity (I): High (H)
- Availability (A): High (H)
- Modified Attack Vector (MAV): Local (L)
- Modified Attack Complexity (MAC): Low (L)
- Modified Privileges Required (MPR): Low (L)
- Modified User Interaction (MUI): None (N)
- Modified Confidentiality (MC): High (H)
- Modified Scope (MS): Unchanged (U)
- Modified Integrity (MI): High (H)
- Modified Availability (MA): High (H)
Activity log
- Created suggestion
IBM® Data Server driver for JDBC and SQLJ is vulnerable to remote code execution when jdbc url is under user control
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to remote code execution when jdbc url is under user control.
References
Affected products
- =<11.5.9
- =<12.1.4
Matching in nixpkgs
pkgs.pdb2pqr
Software for determining titration states, adding missing atoms, and assigning charges/radii to biomolecules
pkgs.influxdb2
None
pkgs.influxdb2-provision
Small utility to help provisioning influxdb2
pkgs.python313Packages.pdb2pqr
Software for determining titration states, adding missing atoms, and assigning charges/radii to biomolecules
pkgs.python314Packages.pdb2pqr
Software for determining titration states, adding missing atoms, and assigning charges/radii to biomolecules
pkgs.influxdb2-token-manipulator
Utility program to manipulate influxdb api tokens for declarative setups
pkgs.gnatPackages.gnatcoll-db2ada
GNAT Components Collection - Database packages
pkgs.gnat13Packages.gnatcoll-db2ada
GNAT Components Collection - Database packages
pkgs.gnat14Packages.gnatcoll-db2ada
GNAT Components Collection - Database packages
pkgs.gnat15Packages.gnatcoll-db2ada
GNAT Components Collection - Database packages
Package maintainers
-
@sternenseemann Lukas Epple <sternenseemann@systemli.org>
-
@oddlama oddlama <oddlama@oddlama.org>
-
@natsukium Tomoya Otabi <nixpkgs@natsukium.com>