CVE-2010-3738

2010-10-0517:00:00

mitre

www.cve.org

6.5 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

46.8%

JSON

The Security component in IBM DB2 UDB 9.5 before FP6a logs AUDIT events by using a USERID and an AUTHID value corresponding to the instance owner, instead of a USERID and an AUTHID value corresponding to the logged-in user account, which makes it easier for remote authenticated users to execute Audit administration commands without discovery.