Summary
generated automatically from NVD dataIBM dashDB Local embeds hard-coded credentials (CWE-798), which a remote attacker could use to gain access to the Docker container or the database. No authentication or user interaction is needed, and the attack can be launched over the network. NVD lists versions 1.0.0, 1.1.0, 1.1.1, 1.2.0 and 1.2.1 as affected, and rates the flaw 9.8 (CRITICAL, CVSS v3.0).
NVD description
IBM dashDB Local uses hard-coded credentials that could allow a remote attacker to gain access to the Docker container or database.
EPSS · FIRST.org
2.4%probability of exploitation in the next 30 days
Higher than 84% of scored CVEs
EPSS (Exploit Prediction Scoring System) estimates, from observed exploitation activity, how likely a CVE is to be exploited in the next 30 days. It complements CVSS, which measures severity, not likelihood. Score of 2026-10-30, recomputed daily by FIRST.org.
CVSS v3.0 Score
Information
- Published
- 8 févr. 2017
- Updated
- 17 juin 2026
- Status
- Modified
- Source
- psirt@us.ibm.com
Affected products
Bounds published by NVD: "< 8.4.27" means 8.4.27 is no longer vulnerable. The fixed release to install is in the vendor advisory.
Weaknesses (CWE)
References (4)
- http://www.ibm.com/support/docview.wss?uid=swg21994471PatchVendor Advisory
- http://www.securityfocus.com/bid/95628Third Party AdvisoryVDB Entry
- http://www.ibm.com/support/docview.wss?uid=swg21994471PatchVendor Advisory
- http://www.securityfocus.com/bid/95628Third Party AdvisoryVDB Entry
Similar CVEs
Other vulnerabilities of type CWE-798
Know which CVEs hit the versions you run.
Add the product and its version: cveo.tech lists the CVEs that affect it right away, then alerts you by email when a new one affects it — including before NVD has finished its analysis. Free, an account is all it takes.