Vulnerability Description
IBM DB2 9.7, 10,1, 10.5, and 11.1 is vulnerable to an unauthorized command that allows the database to be activated when authentication type is CLIENT. IBM X-Force ID: 129830.
CVSS Score
3.7
LOW
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ibm | Db2 | 9.7 |
| Ibm | Db2 Connect | 9.7 |
| Linux | Linux Kernel | - |
| Microsoft | Windows | - |
Related Weaknesses (CWE)
References
- http://www.ibm.com/support/docview.wss?uid=swg22007186PatchVendor Advisory
- http://www.securityfocus.com/bid/100684Third Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1039308Third Party AdvisoryVDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/129830Vendor Advisory
- http://www.ibm.com/support/docview.wss?uid=swg22007186PatchVendor Advisory
- http://www.securityfocus.com/bid/100684Third Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1039308Third Party AdvisoryVDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/129830Vendor Advisory
FAQ
What is CVE-2017-1520?
CVE-2017-1520 is a vulnerability with a CVSS score of 3.7 (LOW). IBM DB2 9.7, 10,1, 10.5, and 11.1 is vulnerable to an unauthorized command that allows the database to be activated when authentication type is CLIENT. IBM X-Force ID: 129830.
How severe is CVE-2017-1520?
CVE-2017-1520 has been rated LOW with a CVSS base score of 3.7/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2017-1520?
Check the references section above for vendor advisories and patch information. Affected products include: Ibm Db2, Ibm Db2 Connect, Linux Linux Kernel, Microsoft Windows.