VULNERABILITY INTELLIGENCE
CVE-2007-4417
CVSS score6 MEDIUM
EPSS probability1.34%
CISA KEVNot currently listed
Published2007-08-18
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:S/C:P/I:P/A:P
Description
IBM DB2 UDB 8 before Fixpak 15 and 9.1 before Fixpak 3 does not properly revoke privileges on methods, which allows remote authenticated users to execute a method after revocation until the routine auth cache is flushed.