Authentication flaw

2017-09-1221:29:00

PRIOn knowledge base

www.prio-n.com

4.2 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

56.7%

JSON

IBM DB2 9.7, 10,1, 10.5, and 11.1 is vulnerable to an unauthorized command that allows the database to be activated when authentication type is CLIENT. IBM X-Force ID: 129830.

CPENameOperatorVersion
db2eq9.7
db2eq9.7.0.1
db2eq9.7.0.2
db2eq9.7.0.3
db2eq9.7.0.4
db2eq9.7.0.5
db2eq9.7.0.6
db2eq9.7.0.7
db2eq9.7.0.8
db2eq9.7.0.9

Name	Operator	Version
db2	eq	9.7
db2	eq	9.7.0.1
db2	eq	9.7.0.2
db2	eq	9.7.0.3
db2	eq	9.7.0.4
db2	eq	9.7.0.5
db2	eq	9.7.0.6
db2	eq	9.7.0.7
db2	eq	9.7.0.8
db2	eq	9.7.0.9

Rows per page:

1-10 of 561

References

www.ibm.com/support/docview.wss?uid=swg22007186

www.securityfocus.com/bid/100684

www.securitytracker.com/id/1039308

exchange.xforce.ibmcloud.com/vulnerabilities/129830