Lucene search

[email protected]CVE-2008-7130

HistoryAug 31, 2009 - 10:30 a.m.

CVE-2008-7130

2009-08-3110:30:01

[email protected]

web.nvd.nist.gov

cve-2008-7130

db2 monitoring console

vulnerability

file upload

remote attackers

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

7 High

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

77.6%

JSON

Unspecified vulnerability in DB2 Monitoring Console 2.2.4 and earlier allows remote attackers to upload arbitrary files via unknown vectors.

Affected configurations

NVD

Node

peter_kohlmanndb2_monitoring_consoleRange≤2.2.24

peter_kohlmanndb2_monitoring_consoleMatch2.1.236

peter_kohlmanndb2_monitoring_consoleMatch2.1.246

peter_kohlmanndb2_monitoring_consoleMatch2.1.248

peter_kohlmanndb2_monitoring_consoleMatch2.1.251

peter_kohlmanndb2_monitoring_consoleMatch2.2.18

CPENameOperatorVersion
peter_kohlmann:db2_monitoring_consolepeter kohlmann db2 monitoring consolele2.2.24
peter_kohlmann:db2_monitoring_consolepeter kohlmann db2 monitoring consoleeq2.1.236
peter_kohlmann:db2_monitoring_consolepeter kohlmann db2 monitoring consoleeq2.1.246
peter_kohlmann:db2_monitoring_consolepeter kohlmann db2 monitoring consoleeq2.1.248
peter_kohlmann:db2_monitoring_consolepeter kohlmann db2 monitoring consoleeq2.1.251
peter_kohlmann:db2_monitoring_consolepeter kohlmann db2 monitoring consoleeq2.2.18

CPE	Name	Operator	Version
peter_kohlmann:db2_monitoring_console	peter kohlmann db2 monitoring console	le	2.2.24
peter_kohlmann:db2_monitoring_console	peter kohlmann db2 monitoring console	eq	2.1.236
peter_kohlmann:db2_monitoring_console	peter kohlmann db2 monitoring console	eq	2.1.246
peter_kohlmann:db2_monitoring_console	peter kohlmann db2 monitoring console	eq	2.1.248
peter_kohlmann:db2_monitoring_console	peter kohlmann db2 monitoring console	eq	2.1.251
peter_kohlmann:db2_monitoring_console	peter kohlmann db2 monitoring console	eq	2.2.18

References

osvdb.org/43113

secunia.com/advisories/29367

sourceforge.net/forum/forum.php?forum_id=797405

www.securityfocus.com/bid/28253

exchange.xforce.ibmcloud.com/vulnerabilities/41211

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

7 High

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

77.6%

JSON

Related for CVE-2008-7130

nvd1 prion1 cvelist1 openvas2