IBM Security Bulletin: Privilege escalation in IBM® Db2® tool db2cacpy (CVE-2018-1685).

Sep 20, 2018 9:00 am EDT

Categorized: Medium Severity

Share this post:

A vulnerability exists in db2cacpy which could expose sensitive information to user.

CVE(s): CVE-2018-1685

Affected product(s) and affected version(s):

All fix pack levels of IBM Db2 V9.7, V10.1, V10.5, and V11.1 editions on all Unix-type platforms are affected. Windows platforms are not affected.

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: https://www-01.ibm.com/support/docview.wss?uid=ibm10729979
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/145502

from IBM Product Security Incident Response Team https://ift.tt/2pmuSxO