Description
IBM Informix Dynamic Server 14.10, and 15.0 contain a local privilege escalation vulnerability in the oninit setuid-root utility.
CVSS breakdown
CVSS 3.1
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Affected products
- ibm / informix_dynamic_server14.10 – 14.10
- ibm / informix_dynamic_server14.10.0 – 14.10.0
- ibm / informix_dynamic_server15.0 – 15.0
- ibm / informix_dynamic_server15.0.0 – 15.0.0
References
Updated 32m ago · 8 sources