IBM DB2 10.1.x < 10.1.400.770 Information Disclosure (credentialed check)

The version of IBM DB2 installed on the remote host is affected by an information disclosure vulnerability due to an unspecified flaw in the monitoring and audit features. A remote, authenticated attacker can exploit this flaw, via a crafted series of commands, to view passwords in SQL statements...

IBM DB2/DB2 Connect Information Disclosure Vulnerability

IBM DB2 is a large commercial relational database system. An information disclosure vulnerability exists in IBM DB2 and IBM DB2 Connect, where an authenticated remote DB2 user can execute a series of commands to obtain passwords within ENCRYPT/DECRYPT UDF or federated DDL SQL statements via the...