CVE-2026-17483 - Vulnerability Details - OpenCVE

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 IBM i could allow a local attacker to delete historical flight-recorder archives due to improper access control in an SQL procedure.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact Low

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Ibm	Db2 Mirror For I

Configuration 1 [-]

cpe:2.3:a:ibm:db2_mirror_for_i:*:*:*:*:*:*:*:*

No data.

References

Link	Providers
https://www.ibm.com/support/pages/node/7285904

History

Wed, 09 Sep 2026 16:00:00 +0000

Type	Values Removed	Values Added
CPEs		cpe:2.3:a:ibm:db2_mirror_for_i::::::::

Fri, 04 Sep 2026 16:45:00 +0000

Type	Values Removed	Values Added
Description		IBM Db2 Mirror for i 7.4, 7.5, and 7.6 IBM i could allow a local attacker to delete historical flight-recorder archives due to improper access control in an SQL procedure.
Title		IBM Db2 Mirror for i is affected by multiple vulnerabilities [, , ]
First Time appeared		Ibm Ibm db2 Mirror For I
Weaknesses		CWE-285
CPEs		cpe:2.3:a:ibm:db2_mirror_for_i:7.4.0:::::::* cpe:2.3:a:ibm:db2_mirror_for_i:7.4:::::::* cpe:2.3:a:ibm:db2_mirror_for_i:7.5.0:::::::* cpe:2.3:a:ibm:db2_mirror_for_i:7.5:::::::* cpe:2.3:a:ibm:db2_mirror_for_i:7.6.0:::::::* cpe:2.3:a:ibm:db2_mirror_for_i:7.6:::::::*
Vendors & Products		Ibm Ibm db2 Mirror For I
References		https://www.ibm.com/support/pages/node/7285904
Metrics		cvssV3_1 `{'score': 4.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L'}`

MITRE

Status: PUBLISHED

Assigner: ibm

Published: 2026-09-04T16:31:14.433Z

Updated: 2026-09-04T16:31:14.433Z

Reserved: 2026-07-25T23:05:40.415Z

Link: CVE-2026-17483

Vulnrichment

No data.

NVD

Status : Analyzed

Published: 2026-09-04T17:16:54.777

Modified: 2026-09-09T15:47:35.410

Link: CVE-2026-17483

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-17483", "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "state": "PUBLISHED", "assignerShortName": "ibm", "dateReserved": "2026-07-25T23:05:40.415Z", "datePublished": "2026-09-04T16:31:14.433Z", "dateUpdated": "2026-09-04T16:31:14.433Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm", "dateUpdated": "2026-09-04T16:31:14.433Z"}, "title": "IBM Db2 Mirror for i is affected by multiple vulnerabilities [, , ]", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-285", "description": "CWE-285 Improper Authorization", "type": "CWE"}]}], "affected": [{"vendor": "IBM", "product": "Db2 Mirror for i", "versions": [{"status": "affected", "version": "7.4"}, {"status": "affected", "version": "7.5"}, {"status": "affected", "version": "7.6"}], "cpes": ["cpe:2.3:a:ibm:db2_mirror_for_i:7.4:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:db2_mirror_for_i:7.4.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:db2_mirror_for_i:7.5:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:db2_mirror_for_i:7.5.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:db2_mirror_for_i:7.6:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:db2_mirror_for_i:7.6.0:*:*:*:*:*:*:*"]}], "descriptions": [{"lang": "en", "value": "IBM Db2 Mirror for i 7.4, 7.5, and 7.6 IBM i could allow a local attacker to delete historical flight-recorder archives due to improper access control in an SQL procedure.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>IBM Db2 Mirror for i 7.4, 7.5, and 7.6 IBM i could allow a local attacker to delete historical flight-recorder archives due to improper access control in an SQL procedure.</p>"}]}], "references": [{"url": "https://www.ibm.com/support/pages/node/7285904", "tags": ["vendor-advisory", "patch"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "LOW", "baseSeverity": "MEDIUM", "baseScore": 4.3, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"}}], "solutions": [{"lang": "en", "value": "IBM strongly recommends addressing the vulnerability now.\n\n\n\n\n\nIBM i Release\n\n\n\n5770-SS1 PTF Numbers\n\n\n\nPTF Download Link\n\n\n\n7.4\n\n\n\n\n\n\n\nSJ11153\n\n\n\nSJ11193\n\n\n\nSJ11207\n\n\n\n https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11153 \n\n\n\n https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11193 \n\n\n\n https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11207 \n\n\n\n7.5\n\n\n\n\n\n\n\nSJ11152\u00a0\n\n\n\nSJ11194\n\n\n\nSJ11206\n\n\n\n https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11152 \n\n\n\n https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11194 \n\n\n\n https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11206 \n\n\n\n7.6\n\n\n\n\n\n\n\nSJ11151\n\n\n\nSJ11195\n\n\n\nSJ11205\n\n\n\n https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11151 \n\n\n\n https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11195 \n\n\n\n https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11205 \n\n\n\n\n\n\n\n https://www.ibm.com/support/fixcentral", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<div><p>IBM strongly recommends addressing the vulnerability now.</p></div><div><div><table><tbody><tr><td><p>IBM i Release</p></td><td><p>5770-SS1 PTF Numbers</p></td><td><p>PTF Download Link</p></td></tr><tr><td><p>7.4</p><p></p></td><td><p>SJ11153</p><p>SJ11193</p><p>SJ11207</p></td><td><p><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11153\" rel=\"noopener noreferrer nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11153</a></p><p><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11193\" rel=\"noopener noreferrer nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11193</a></p><p><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11207\" rel=\"noopener noreferrer nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11207</a></p></td></tr><tr><td><p>7.5</p><p></p></td><td><p>SJ11152\u00a0</p><p>SJ11194</p><p>SJ11206</p></td><td><p><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11152\" rel=\"noopener noreferrer nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11152</a></p><p><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11194\" rel=\"noopener noreferrer nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11194</a></p><p><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11206\" rel=\"noopener noreferrer nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11206</a></p></td></tr><tr><td><p>7.6</p><p></p></td><td><p>SJ11151</p><p>SJ11195</p><p>SJ11205</p></td><td><p><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11151\" rel=\"noopener noreferrer nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11151</a></p><p><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11195\" rel=\"noopener noreferrer nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11195</a></p><p><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11205\" rel=\"noopener noreferrer nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11205</a></p></td></tr></tbody></table></div></div><p><a href=\"https://www.ibm.com/support/fixcentral\" rel=\"nofollow\">https://www.ibm.com/support/fixcentral</a></p>"}]}]}}}

{"affected": [{"affectedData": [{"cpes": ["cpe:2.3:a:ibm:db2_mirror_for_i:7.4:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:db2_mirror_for_i:7.4.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:db2_mirror_for_i:7.5:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:db2_mirror_for_i:7.5.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:db2_mirror_for_i:7.6:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:db2_mirror_for_i:7.6.0:*:*:*:*:*:*:*"], "product": "Db2 Mirror for i", "vendor": "IBM", "versions": [{"status": "affected", "version": "7.4"}, {"status": "affected", "version": "7.5"}, {"status": "affected", "version": "7.6"}]}], "source": "psirt@us.ibm.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:ibm:db2_mirror_for_i:*:*:*:*:*:*:*:*", "matchCriteriaId": "E01FA903-74C4-4F19-9DF6-A5AACD6DF475", "versionEndIncluding": "7.6", "versionStartIncluding": "7.4", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "IBM Db2 Mirror for i 7.4, 7.5, and 7.6 IBM i could allow a local attacker to delete historical flight-recorder archives due to improper access control in an SQL procedure."}], "id": "CVE-2026-17483", "lastModified": "2026-09-09T15:47:35.410", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 1.4, "source": "psirt@us.ibm.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 3.3, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 1.4, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2026-09-04T17:16:54.777", "references": [{"source": "psirt@us.ibm.com", "tags": ["Patch", "Vendor Advisory"], "url": "https://www.ibm.com/support/pages/node/7285904"}], "sourceIdentifier": "psirt@us.ibm.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-285"}], "source": "psirt@us.ibm.com", "type": "Primary"}]}