CVE-2023-27859

Summary

CVE-2023-27859 is a remote code execution vulnerability affecting IBM Db2 10.1, 10.5, and 11.1. An attacker can exploit this issue by installing maliciously named jar files across multiple databases, overwriting existing files and ultimately executing arbitrary code. IBM X-Force has assigned ID 249205 to this vulnerability. This weakness could potentially impact the security of databases running IBM Db2 versions mentioned above, emphasizing the need for immediate patches.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.