CVE-2023-47145

Summary

CVE-2023-47145 is a privilege escalation vulnerability affecting IBM Db2 for Windows versions 10.5, 11.1, and 11.5. A local user can exploit the MSI repair functionality to elevate their privileges to the SYSTEM user level, granting them unrestricted access to the system. This issue carries a significant risk, as local users could potentially install unauthorized software, view sensitive data, or perform system alterations. IBM X-Force has assigned this vulnerability the ID 270402.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.