IBM Db2 10.1, 10.5, and 11.1 could allow a remote user to execute arbitrary code caused by installing like named jar files across multiple databases. A user could exploit this by installing a malicious jar file that overwrites the existing like named jar file in another database. IBM X-Force ID: 249205.
References
| Link | Resource |
|---|---|
| https://exchange.xforce.ibmcloud.com/vulnerabilities/249205 | VDB Entry Vendor Advisory |
| https://security.netapp.com/advisory/ntap-20240307-0002/ | |
| https://www.ibm.com/support/pages/node/7105503 | Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
07 Mar 2024, 17:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
25 Jan 2024, 02:03
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/249205 - VDB Entry, Vendor Advisory | |
| References | () https://www.ibm.com/support/pages/node/7105503 - Patch, Vendor Advisory | |
| CPE | cpe:2.3:a:ibm:db2:*:*:*:*:*:*:*:* cpe:2.3:o:ibm:linux_on_ibm_z:-:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* cpe:2.3:o:ibm:aix:-:*:*:*:*:*:*:* cpe:2.3:o:hp:hp-ux:-:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:* cpe:2.3:o:oracle:solaris:-:*:*:*:*:*:*:* |
|
| CWE | NVD-CWE-noinfo | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.5 |
| First Time |
Oracle
Ibm Linux Microsoft Microsoft windows Ibm db2 Linux linux Kernel Ibm linux On Ibm Z Oracle solaris Hp Ibm aix Hp hp-ux |
22 Jan 2024, 20:28
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-01-22 20:15
Updated : 2024-03-07 17:15
NVD link : CVE-2023-27859
Mitre link : CVE-2023-27859
CVE.ORG link : CVE-2023-27859
JSON object : View
Products Affected
hp
- hp-ux
ibm
- aix
- linux_on_ibm_z
- db2
linux
- linux_kernel
microsoft
- windows
oracle
- solaris
CWE