CVE-2020-4230: Medium severity IBM DB2 vulnerability
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.1 and 11.5 is vulnerable to an escalation of privilege when an authenticated local attacker with special permissions executes specially crafted Db2 commands. IBM X-Force ID: 175212.
Other sources
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) is vulnerable to an escalation of privilege when an authenticated local attacker with special permissions executes specially crafted Db2 commands.
— IBM
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-4230?
CVE-2020-4230 has a medium severity rating due to the potential for privilege escalation by authenticated local attackers.
How do I fix CVE-2020-4230?
To fix CVE-2020-4230, you should apply the latest patches provided by IBM for DB2 versions 11.1 and 11.5.
Who is affected by CVE-2020-4230?
CVE-2020-4230 affects users of IBM DB2 for Linux, UNIX, and Windows versions 11.1 and 11.5.
Can CVE-2020-4230 be exploited remotely?
No, CVE-2020-4230 requires local access to the system for exploitation.
What is the impact of CVE-2020-4230?
The impact of CVE-2020-4230 is the potential for an authenticated local attacker to gain elevated privileges on the system.