CVE-2018-1634

MEDIUM

IBM Informix Dynamic Server Enterprise Edition 12.1 - Privilege Escalation via Symbolic Link in infos.DBSERVERNAME

Title source: llm

Description

IBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local user logged in with database administrator user to gain root privileges through a symbolic link vulnerability in infos.DBSERVERNAME. IBM X-Force ID: 144437.

References (3)

Core 3

Core References

Vendor Advisory x_refsource_confirm

http://www.ibm.com/support/docview.wss?uid=ibm10964987

VDB Entry, Vendor Advisory vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/144437

Third Party Advisory x_refsource_confirm

https://security.netapp.com/advisory/ntap-20190903-0002/

Scores

CVSS v3 6.7

EPSS 0.0042

EPSS Percentile 33.1%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-59

Status published

Products (1)

ibm/informix_dynamic_server 12.10 fc1 (12 CPE variants)

Published Aug 20, 2019

Tracked Since Feb 18, 2026