VULNERABILITY INTELLIGENCE

CVE-2007-1228

CVSS score4.4 MEDIUM
EPSS probability0.30%
CISA KEVNot currently listed
Published2007-03-02
Last modified2026-06-16
CVSS vectorAV:L/AC:M/Au:S/C:C/I:N/A:N

Description

IBM DB2 UDB 8.2 before Fixpak 7 (aka fixpack 14), and DB2 9 before Fix Pack 2, on UNIX allows the "fenced" user to access certain unauthorized directories.

Weakness classification

  • CWE-287: Improper Authentication

Primary references