Informix Dynamic Server EUVD-2024-55112

Requires pre-existing local access to the host running IBM Informix Dynamic Server 14.10 - the CVSS vector is AV:L, so the attacker must already have a local account or shell on the system; no network path and no user interaction are involved. The limiting factors are therefore: (1) local access is mandatory, (2) it applies specifically to Informix Dynamic Server 14.10, and (3) exploitation escalates an existing low-privilege foothold (PR:L) to full Informix administrator. It is not remotely exploitable and does not work against a host the attacker cannot already log into.

Signals are consistent and point to a genuine but locally-scoped issue, not a remote emergency. The CVSS 3.1 vector (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H = 7.8 HIGH) requires local access and an existing low-privilege account, but yields full administrator control of the Informix instance (C:H/I:H/A:H), which is why the base score is high despite the local vector. EPSS is effectively negligible at 0.02% (5th percentile), and the flaw is NOT in CISA KEV, with no public exploit identified at time of analysis - so real-world exploitation is unlikely to be opportunistic or automated. There is no signal conflict: every source agrees this is a local privilege-escalation/authentication-bypass primitive. The main caveat is that the assigned tag 'Information Disclosure' understates the impact - this is a passwordless admin login (full compromise of the DB), not merely disclosure. Net: a legitimate hardening priority on multi-user hosts running Informix 14.10, but low urgency relative to network-exploitable or actively-exploited CVEs.

An attacker who already holds a local unprivileged account (or has obtained a low-privilege shell on the database host) invokes the Informix login path and authenticates as the Informix administrator without supplying a password, gaining full control of the database server. No public proof-of-concept is available and the flaw is not known to be actively exploited; the local attack vector means it is most relevant as a post-compromise privilege-escalation step or an insider-threat vector.