CVE-2017-1150
low
CVSS v3
3.1
CVSS v2
3.5
VIR risk
3.1
Description
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.1, 10.5, and 11.1 could allow an authenticated attacker with specialized access to tables that they should not be permitted to view. IBM Reference #: 1999515.
Predictions
Exploit likelihood
42%
Patch ETA
—
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
Vendor advisory: psirt@us.ibm.com — http://www.ibm.com/support/docview.wss?uid=swg21999515
References
CWEs
CWE-269
Verify integrity in audit chain (admin only). AS-IS.