Skip to content
CVE PROGRAM SOURCE RECORD8.4 High

CVE-2023-27558

IBM Db2 privilege escalation

Description

IBM Db2 on Windows 10.5, 11.1, and 11.5 may be vulnerable to a privilege escalation caused by at least one installed service using an unquoted service path. A local attacker could exploit this vulnerability to gain elevated privileges by inserting an executable file in the path of the affected service. IBM X-Force ID: 249194.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

IBM Db2 for Windows

Default version status: unaffected

  • 10.5, 11.1 ,11.5affected

References