CVE-2017-1520

LowCVSS 3.7/10Last modified Jun 17, 2026

Description

IBM DB2 9.7, 10,1, 10.5, and 11.1 is vulnerable to an unauthorized command that allows the database to be activated when authentication type is CLIENT. IBM X-Force ID: 129830.

Metrics

CVSS 3.0 3.7/10CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-287

Affected software

VendorProductVersions
IBMDB2 for Linux, UNIX and Windows10.5; 10.1; 9.7; 11.1

References

Timeline

Published
Sep 12, 2017
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2017

CVE-2017-152004.3In Kanboard before 1.0.47, by altering form data, an authenticated user can add a new task to a private project of another user.CVE-2017-152014.3In Kanboard before 1.0.47, by altering form data, an authenticated user can edit tags of a private project of another user.CVE-2017-152024.3In Kanboard before 1.0.47, by altering form data, an authenticated user can edit columns of a private project of another user.CVE-2017-152034.3In Kanboard before 1.0.47, by altering form data, an authenticated user can remove categories from a private project of another user.CVE-2017-152044.3In Kanboard before 1.0.47, by altering form data, an authenticated user can add automatic actions to a private project of another user.CVE-2017-152054.3In Kanboard before 1.0.47, by altering form data, an authenticated user can download attachments from a private project of another user.CVE-2017-152064.3In Kanboard before 1.0.47, by altering form data, an authenticated user can add an internal link to a private project of another user.CVE-2017-152074.3In Kanboard before 1.0.47, by altering form data, an authenticated user can edit tasks of a private project of another user.CVE-2017-152084.3In Kanboard before 1.0.47, by altering form data, an authenticated user can remove automatic actions from a private project of another user.CVE-2017-152094.3In Kanboard before 1.0.47, by altering form data, an authenticated user can remove attachments from a private project of another user.CVE-2017-15216.1IBM Tivoli Endpoint Manager (for Lifecycle/Power/Patch) Platform and Applications (IBM BigFix Platform 9.2 and 9.5) is vulnerable to cross-sCVE-2017-152104.3In Kanboard before 1.0.47, by altering form data, an authenticated user can see thumbnails of pictures from a private project of another use
CVE-2017-1520: Low severity, CVSS 3.7 | Vulnix