Lucene search

K
cve[email protected]CVE-2012-2194
HistoryJul 25, 2012 - 10:42 a.m.

CVE-2012-2194

2012-07-2510:42:34
CWE-22
web.nvd.nist.gov
280
cve-2012-2194
directory traversal
vulnerability
ibm db2
sqlj
remote attack

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

6.4 Medium

AI Score

Confidence

Low

0.009 Low

EPSS

Percentile

82.3%

Directory traversal vulnerability in the SQLJ.DB2_INSTALL_JAR stored procedure in IBM DB2 9.1 before FP12, 9.5 through FP9, 9.7 through FP6, 9.8 through FP5, and 10.1 allows remote attackers to replace JAR files via unspecified vectors.

Affected configurations

NVD
Node
ibmdb2Match9.1
OR
ibmdb2Match9.1.0.1
OR
ibmdb2Match9.1.0.2
OR
ibmdb2Match9.1.0.2a
OR
ibmdb2Match9.1.0.3
OR
ibmdb2Match9.1.0.3a
OR
ibmdb2Match9.1.0.4
OR
ibmdb2Match9.1.0.4a
OR
ibmdb2Match9.1.0.5
OR
ibmdb2Match9.1.0.6
OR
ibmdb2Match9.1.0.6a
OR
ibmdb2Match9.1.0.7
OR
ibmdb2Match9.1.0.7a
OR
ibmdb2Match9.1.0.8
OR
ibmdb2Match9.1.0.9
OR
ibmdb2Match9.1.0.10
OR
ibmdb2Match9.1.0.11
Node
ibmdb2Match9.5
OR
ibmdb2Match9.5.0.1
OR
ibmdb2Match9.5.0.2
OR
ibmdb2Match9.5.0.2a
OR
ibmdb2Match9.5.0.3
OR
ibmdb2Match9.5.0.3a
OR
ibmdb2Match9.5.0.3b
OR
ibmdb2Match9.5.0.4
OR
ibmdb2Match9.5.0.4a
OR
ibmdb2Match9.5.0.5
OR
ibmdb2Match9.5.0.6a
OR
ibmdb2Match9.5.0.7
OR
ibmdb2Match9.5.0.8
OR
ibmdb2Match9.5.0.9
Node
ibmdb2Match9.7
OR
ibmdb2Match9.7.0.1
OR
ibmdb2Match9.7.0.2
OR
ibmdb2Match9.7.0.3
OR
ibmdb2Match9.7.0.4
OR
ibmdb2Match9.7.0.5
OR
ibmdb2Match9.7.0.6
Node
ibmdb2Match9.8
OR
ibmdb2Match9.8.0.3
OR
ibmdb2Match9.8.0.4
OR
ibmdb2Match9.8.0.5
Node
ibmdb2Match10.1

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

6.4 Medium

AI Score

Confidence

Low

0.009 Low

EPSS

Percentile

82.3%