Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2011-1846
HistoryMay 03, 2011 - 8:55 p.m.

CVE-2011-1846

2011-05-0320:55:12
CWE-264
[email protected]
web.nvd.nist.gov
26
cve-2011-1846
ibm db2
security vulnerability
role membership
non-ddl statements

6.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

8.9 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

71.7%

JSON

IBM DB2 9.5 before FP7 and 9.7 before FP4 on Linux, UNIX, and Windows does not properly revoke role membership from groups, which allows remote authenticated users to execute non-DDL statements by leveraging previous inherited possession of a role, a different vulnerability than CVE-2011-0757. NOTE: some of these details are obtained from third party information.

Affected configurations

NVD
Node
ibmdb2Range≤9.5fp6a
OR
ibmdb2Match9.5
OR
ibmdb2Match9.5fp1
OR
ibmdb2Match9.5fp2
OR
ibmdb2Match9.5fp2a
OR
ibmdb2Match9.5fp3
OR
ibmdb2Match9.5fp3a
OR
ibmdb2Match9.5fp3b
OR
ibmdb2Match9.5fp4
OR
ibmdb2Match9.5fp4a
OR
ibmdb2Match9.5fp5
OR
ibmdb2Match9.5fp6
Node
ibmdb2Range≤9.7fp3
OR
ibmdb2Match9.7
OR
ibmdb2Match9.7fp1
OR
ibmdb2Match9.7fp2
CPENameOperatorVersion
ibm:db2ibm db2le9.5

Related

prion 2
cvelist 2
nvd 2
nessus 4
openvas 4
ibm 2
cve 1
prion
prion
Design/Logic Flaw
2011-05-03 20:55:00
Code injection
2011-02-02 23:00:00
cvelist
cvelist
CVE-2011-1846
2011-05-03 20:00:00
CVE-2011-0757
2011-02-02 22:00:00
nvd
nvd
CVE-2011-1846
2011-05-03 20:55:12
CVE-2011-0757
2011-02-02 23:00:33
nessus
nessus
IBM DB2 9.7 < Fix Pack 4 Multiple Vulnerabilities
2011-04-25 00:00:00
IBM DB2 9.5 < Fix Pack 7 Multiple Vulnerabilities
2011-02-01 00:00:00
IBM DB2 9.1 < Fix Pack 10 Multiple Vulnerabilities
2011-02-01 00:00:00
openvas
openvas
IBM Db2 Multiple Security Bypass Vulnerabilities (May 2011)
2011-05-16 00:00:00
IBM DB2 Multiple Security Bypass Vulnerabilities (May-11)
2011-05-16 00:00:00
IBM DB2 DBADM Privilege Revocation Security Bypass Vulnerability
2011-02-07 00:00:00
ibm
ibm
Security Bulletin: IBM Security Guardium is affected by Using Components with Known Vulnerabilities vulnerability
2018-07-02 14:49:58
Security Bulletin: IBM Security Guardium is affected by multiple vulnerabilities
2021-04-13 20:46:06
cve
cve
CVE-2011-0757
2011-02-02 23:00:33

6.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

8.9 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

71.7%

JSON
Related for CVE-2011-1846
prion2cvelist2nvd2nessus4openvas4ibm2cve1