Description
IBM DB2 Universal Database 7 before FixPak 12 creates certain DMS directories with insecure permissions (777), which allows local users to modify or delete certain DB2 files.
Affected products
- ibm / db2_universal_database7.0 – 7.0
- ibm / db2_universal_database8.0 – 8.0