CVE-2024-45675
HighCVSS 8.4Exploitation Probability (EPSS)
Low risk1th percentile - higher than 1% of all known CVEs
Summary
IBM Informix Dynamic Server 14.10 could allow a local user on the system to log into the Informix server as administrator without a password.
Risk Assessment
A local user can gain administrator privileges without authentication. This poses a serious threat to database security.
Recommendation
Apply the IBM fix or restrict local access to the server. Also verify that no unauthorized access has occurred.
Other vulnerabilities in IBM Informix Dynamic Server
See all- CVE-2016-0226High
The client implementation in IBM Informix Dynamic Server 11.70.xCn on Windows does not properly restrict access to the nsrd, nsrexecd, and portmap executable files, allowing local users to gain privileges via a Trojan horse file.
- CVE-2026-13476High
IBM Informix Dynamic Server 14.10, 15.0, and 12.10 could allow an unauthenticated user to execute arbitrary commands with service account privileges due to improper validation of user supplied input.
- CVE-2026-13367High
IBM Informix Dynamic Server 14.10 and 15.0 contain a local privilege escalation vulnerability in the oninit setuid-root utility.
Original NVD description (English source)
IBM Informix Dynamic Server 14.10 could allow a local user on the system to log into the Informix server as administrator without a password.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS