CVE-2010-3738

IBM DB2 UDB 9.5 prior to FP6a is affected by an audit-logging issue in the Security component, which uses the instance owner’s USERID/AUTHID instead of the logged-in user’s, enabling remote authenticated users to run Audit administration commands without discovery. This is documented in CVE-2010-...