Db2 Intelligence Center
Monthly
Authenticated low-privileged users of IBM Db2 Intelligence Center 1.1.0, 1.1.1, and 1.1.2 can perform unauthorized server-side actions by circumventing security checks that are enforced only in the client, allowing integrity-impacting operations the user should not be permitted to run. The flaw is rated CVSS 6.5 (AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N), meaning it requires a valid account, yields no data disclosure or denial of service, but can corrupt or alter state; there is no public exploit identified at time of analysis and EPSS is low at 0.21% (10th percentile). This is best characterized as a moderate-risk authorization-bypass issue affecting authenticated insiders or credential-holders rather than an unauthenticated remote threat.
Authenticated low-privileged users of IBM Db2 Intelligence Center 1.1.0, 1.1.1, and 1.1.2 can perform unauthorized server-side actions by circumventing security checks that are enforced only in the client, allowing integrity-impacting operations the user should not be permitted to run. The flaw is rated CVSS 6.5 (AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N), meaning it requires a valid account, yields no data disclosure or denial of service, but can corrupt or alter state; there is no public exploit identified at time of analysis and EPSS is low at 0.21% (10th percentile). This is best characterized as a moderate-risk authorization-bypass issue affecting authenticated insiders or credential-holders rather than an unauthenticated remote threat.