{"id":"CVE-2017-1092","published":"2017-05-22T20:00:00Z","modified":"2024-08-05T13:25:17Z","title":"IBM Informix Open Admin Tool 11.5, 11.7, and 12.1 could allow an unauthorized user to execute arbitrary code as system…","vendor":"IBM Corporation","product":"Informix Servers","tier":"core","eol":null,"affectedVersions":[{"vendor":"IBM Corporation","product":"Informix Servers","versions":["11.5, 11.7, 12.1"]}],"description":{"text":"IBM Informix Open Admin Tool 11.5, 11.7, and 12.1 could allow an unauthorized user to execute arbitrary code as system admin on Windows servers. IBM X-Force ID: 120390.","provenance":"source","from":"CVE.org"},"summary":{"text":"The flaw lies in IBM Informix Open Admin Tool, a component of IBM Informix Servers, in versions 11.5, 11.7, and 12.1. An attacker who is not authorized to use the tool can execute arbitrary code with system administrator privileges on Windows servers.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-29T07:19:19Z"},"cvss":null,"epss":{"score":0.75767,"percentile":0.99522,"date":"2026-10-28","provenance":"source"},"kev":null,"vulncheckKev":null,"exploited":false,"otx":{"pulseCount":0,"pulses":[],"provenance":"machine"},"cwes":[],"references":[{"url":"http://www.ibm.com/support/docview.wss?uid=swg22002897","tags":["x_refsource_CONFIRM"]},{"url":"https://www.exploit-db.com/exploits/42541/","tags":["exploit","x_refsource_EXPLOIT-DB"]},{"url":"https://www.exploit-db.com/exploits/42091/","tags":["exploit","x_refsource_EXPLOIT-DB"]}],"techniques":[],"reports":[],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2017-10108","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2017-10108","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[{"id":42091,"url":"https://www.exploit-db.com/exploits/42091","title":"IBM Informix Dynamic Server / Informix Open Admin Tool - DLL Injection / Remote Code Execution / Heap Buffer Overflow","type":"webapps","platform":"windows","date":"2017-05-30","verified":true,"provenance":"source"},{"id":42541,"url":"https://www.exploit-db.com/exploits/42541","title":"IBM OpenAdmin Tool - SOAP welcomeServer PHP Code Execution (Metasploit)","type":"remote","platform":"php","date":"2017-08-22","verified":true,"provenance":"source"}],"exploitSources":{"exploitdb":{"count":2,"earliest":"2017-05-30"},"metasploit":[{"name":"IBM OpenAdmin Tool SOAP welcomeServer PHP Code Execution","module":"exploit/multi/http/ibm_openadmin_tool_soap_welcomeserver_exec","type":"exploit","disclosureDate":"2017-05-30","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/ibm_openadmin_tool_soap_welcomeserver_exec.rb"}],"first":{"date":"2017-05-30","source":"Exploit-DB","url":"https://www.exploit-db.com/exploits/42091"},"provenance":"source"},"exploitRefs":["https://www.exploit-db.com/exploits/42541/","https://www.exploit-db.com/exploits/42091/"],"flow":[],"timeline":[{"date":"2017-05-22","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2017-1092","provenance":"source"},{"date":"2017-05-30","kind":"exploit-public","label":"First public exploit: Exploit-DB (EDB-42091); later: Metasploit 2017-05-30","url":"https://www.exploit-db.com/exploits/42091","provenance":"source"}],"speed":{"daysToPublicExploit":8,"firstExploitFrom":"Exploit-DB","daysToKev":null},"priority":{"score":24.9,"factors":[{"name":"In a KEV catalog","points":0.0,"detail":"not listed"},{"name":"Recent KEV listing","points":0.0,"detail":"not listed"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.9,"detail":"percentile 0.9952"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":5.0,"detail":"2 NVD references tagged Exploit; 2 Exploit-DB entries; 1 Metasploit module"},{"name":"Mentioned in OTX pulses","points":0.0,"detail":"0 pulses"},{"name":"CVSS severity","points":0.0,"detail":"no CVSS"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}