IBM Db2 Privilege Escalation Vulnerability

A vulnerability in IBM Db2 versions 12.1.0 through 12.1.3 for Linux, UNIX, and Windows (including Db2 Connect Server) could allow a local user to execute malicious code that escalates privileges to root. This issue arises from the execution of unnecessary privileges at a level higher than minimum required.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing a local user to gain root access.

Remediation

Users can download a special build containing the interim fix for this vulnerability from Fix Central. These special builds are available for Db2 versions 12.1.2 and 12.1.3 and can be applied to any affected level of the appropriate release.