CVE-2018-1631

MEDIUM

IBM Informix Dynamic Server Enterprise Edition 12.1 - Privilege Escalation via Symbolic Link in oninit mongohash

Title source: llm

Description

IBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local user logged in with database administrator user to gain root privileges through a symbolic link vulnerability in oninit mongohash. IBM X-Force ID: 144431.

References (3)

Core 3

Core References

Vendor Advisory x_refsource_confirm

http://www.ibm.com/support/docview.wss?uid=ibm10964987

VDB Entry, Vendor Advisory vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/144431

Third Party Advisory x_refsource_confirm

https://security.netapp.com/advisory/ntap-20190903-0002/

Scores

CVSS v3 6.7

EPSS 0.0042

EPSS Percentile 33.1%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-59

Status published

Products (1)

ibm/informix_dynamic_server 12.1

Published Aug 20, 2019

Tracked Since Feb 18, 2026