Lucene search

[email protected]CVE-2012-0709

HistoryMar 20, 2012 - 8:55 p.m.

CVE-2012-0709

2012-03-2020:55:01

CWE-20

[email protected]

web.nvd.nist.gov

284

ibm

db2

vulnerability

data access

authorized users

security

nvd

cve-2012-0709

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

AI Score

7.2

Confidence

Low

EPSS

0.008

Percentile

82.2%

JSON

IBM DB2 9.5 before FP9, 9.7 through FP5, and 9.8 through FP4 does not properly check variables, which allows remote authenticated users to bypass intended restrictions on viewing table data by leveraging the CREATEIN privilege to execute crafted SQL CREATE VARIABLE statements.

Affected configurations

NVD

Node

ibmdb2Match9.5

ibmdb2Match9.5fp1

ibmdb2Match9.5fp2

ibmdb2Match9.5fp2a

ibmdb2Match9.5fp3

ibmdb2Match9.5fp3a

ibmdb2Match9.5fp3b

ibmdb2Match9.5fp4

ibmdb2Match9.5fp4a

ibmdb2Match9.5fp5

ibmdb2Match9.5fp6

ibmdb2Match9.5fp6a

ibmdb2Match9.5fp7

ibmdb2Match9.5fp8

ibmdb2Match9.7

ibmdb2Match9.7fp1

ibmdb2Match9.7fp2

ibmdb2Match9.7fp3

ibmdb2Match9.7fp3a

ibmdb2Match9.7fp4

ibmdb2Match9.7fp5

ibmdb2Match9.8

ibmdb2Match9.8fp3

ibmdb2Match9.8fp4

VendorProductVersionCPE
ibmdb29.5cpe:/a:ibm:db2:9.5:fp6::
ibmdb29.5cpe:/a:ibm:db2:9.5:fp2a::
ibmdb29.7cpe:/a:ibm:db2:9.7:fp2::
ibmdb29.5cpe:/a:ibm:db2:9.5:fp6a::
ibmdb29.5cpe:/a:ibm:db2:9.5:fp8::
ibmdb29.8cpe:/a:ibm:db2:9.8:fp3::
ibmdb29.8cpe:/a:ibm:db2:9.8:fp4::
ibmdb29.5cpe:/a:ibm:db2:9.5:fp3a::
ibmdb29.5cpe:/a:ibm:db2:9.5:fp5::
ibmdb29.8cpe:/a:ibm:db2:9.8:::

Vendor	Product	Version	CPE
ibm	db2	9.5	cpe:/a:ibm:db2:9.5:fp6::
ibm	db2	9.5	cpe:/a:ibm:db2:9.5:fp2a::
ibm	db2	9.7	cpe:/a:ibm:db2:9.7:fp2::
ibm	db2	9.5	cpe:/a:ibm:db2:9.5:fp6a::
ibm	db2	9.5	cpe:/a:ibm:db2:9.5:fp8::
ibm	db2	9.8	cpe:/a:ibm:db2:9.8:fp3::
ibm	db2	9.8	cpe:/a:ibm:db2:9.8:fp4::
ibm	db2	9.5	cpe:/a:ibm:db2:9.5:fp3a::
ibm	db2	9.5	cpe:/a:ibm:db2:9.5:fp5::
ibm	db2	9.8	cpe:/a:ibm:db2:9.8:::