CVE-2011-1846: Medium severity IBM DB2 vulnerability
IBM DB2 9.5 before FP7 and 9.7 before FP4 on Linux, UNIX, and Windows does not properly revoke role membership from groups, which allows remote authenticated users to execute non-DDL statements by leveraging previous inherited possession of a role, a different vulnerability than CVE-2011-0757. NOTE: some of these details are obtained from third party information.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-1846?
CVE-2011-1846 has a medium severity rating, as it allows remote authenticated users to execute unauthorized statements.
How do I fix CVE-2011-1846?
To mitigate CVE-2011-1846, upgrade IBM DB2 to version 9.5 FP7 or 9.7 FP4 or later.
Which versions of IBM DB2 are affected by CVE-2011-1846?
CVE-2011-1846 affects IBM DB2 versions 9.5 before FP7 and 9.7 before FP4.
What is the impact of CVE-2011-1846?
CVE-2011-1846 may allow unauthorized execution of non-DDL statements by users who previously inherited roles.
Is CVE-2011-1846 a critical vulnerability?
CVE-2011-1846 is not classified as critical, but it poses a significant risk under certain conditions.