CVE-2023-27868

Summary

CVE-2023-27868 is a critical vulnerability affecting the IBM Db2 JDBC Driver for Db2 for Linux, UNIX, and Windows versions 10.5, 11.1, and 11.5. This issue enables a remote, authenticated attacker to execute arbitrary code on the targeted system. The vulnerability arises due to inadequate input validation, allowing an attacker to instantiate unchecked classes using a specially crafted pluginClassName request. IBM's X-Force has identified this issue with ID 249516.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.