Db2 Mirror for i vulnerabilities
7 known vulnerabilities in Db2 Mirror for i from IBM. 7 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.9 Critical severity
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 is vulnerable to privilege escalation.
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 is vulnerable to privilege escalation. An authenticated attacker could craft a malicious request that bypasses additional authorization and input validation checks to execute malicious code. An attacker could exploit this
- 7.5 High severity
Db2 Mirror for i: Improper Limitation of a Pathname to a Restricted Directory
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a pathname to a restricted directory.
- 9.8 Critical severity
Db2 Mirror for i: Improper Neutralization of Special Elements used in an OS Command
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to execute arbitrary CL commands due to improper neutralization of special elements in a command.
- 9.8 Critical severity
Db2 Mirror for i: Improper Authentication
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to bypass authentication and obtain or alter sensitive information due to improper validation of request URI path segments.
- 7.5 High severity
Db2 Mirror for i: Improper Limitation of a Pathname to a Restricted Directory
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to write arbitrary files due to improper limitation of a pathname to a restricted directory.
- 8.8 High severity
Db2 Mirror for i: Improper Authorization
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass security restrictions due to improper authorization using user-supplied input.
- 9.8 Critical severity
Db2 Mirror for i: Improper Neutralization of Special Elements used in an OS Command
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.