Lucene search

K
cve[email protected]CVE-2012-0709
HistoryMar 20, 2012 - 8:55 p.m.

CVE-2012-0709

2012-03-2020:55:01
CWE-20
web.nvd.nist.gov
284
ibm
db2
vulnerability
data access
authorized users
security
nvd
cve-2012-0709

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

7.2 High

AI Score

Confidence

Low

0.008 Low

EPSS

Percentile

82.2%

IBM DB2 9.5 before FP9, 9.7 through FP5, and 9.8 through FP4 does not properly check variables, which allows remote authenticated users to bypass intended restrictions on viewing table data by leveraging the CREATEIN privilege to execute crafted SQL CREATE VARIABLE statements.

Affected configurations

NVD
Node
ibmdb2Match9.5
OR
ibmdb2Match9.5fp1
OR
ibmdb2Match9.5fp2
OR
ibmdb2Match9.5fp2a
OR
ibmdb2Match9.5fp3
OR
ibmdb2Match9.5fp3a
OR
ibmdb2Match9.5fp3b
OR
ibmdb2Match9.5fp4
OR
ibmdb2Match9.5fp4a
OR
ibmdb2Match9.5fp5
OR
ibmdb2Match9.5fp6
OR
ibmdb2Match9.5fp6a
OR
ibmdb2Match9.5fp7
OR
ibmdb2Match9.5fp8
OR
ibmdb2Match9.7
OR
ibmdb2Match9.7fp1
OR
ibmdb2Match9.7fp2
OR
ibmdb2Match9.7fp3
OR
ibmdb2Match9.7fp3a
OR
ibmdb2Match9.7fp4
OR
ibmdb2Match9.7fp5
OR
ibmdb2Match9.8
OR
ibmdb2Match9.8fp3
OR
ibmdb2Match9.8fp4

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

7.2 High

AI Score

Confidence

Low

0.008 Low

EPSS

Percentile

82.2%