CVE-2023-27859

CVSS 3.1 Score 6.5 of 10 (medium)

Details

Published Jan 22, 2024
Updated: Mar 7, 2024

Summary

CVE-2023-27859 is a vulnerability that affects IBM Db2 versions 10.1, 10.5, and 11.1. It allows a remote user to execute arbitrary code by installing malicious jar files across multiple databases, overwriting existing ones. The vulnerability has a base severity rating of MEDIUM with a base score of 6.5. The privileges required for exploitation are low, and there is no user interaction required. The attack vector is through the network, and the impact includes high integrity impact but no confidentiality impact. To remediate this vulnerability, organizations using affected versions of IBM Db2 should apply the necessary patches or updates provided by IBM to fix this issue and prevent potential code execution by remote attackers.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-27859 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options