PT-2014-6125 · Ibm · Ibm Db2

Publicado 2014-09-04 · Atualizado 2017-08-29 · CVE-2014-4805

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM DB2 version 10.5 before FP4

Description The issue allows local users to obtain sensitive information by reading a file while a LOAD operation is occurring during CDE table LOAD operations. This is due to the creation of temporary files.

Recommendations For IBM DB2 version 10.5 before FP4, update to FP4 or later to resolve the issue.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2014-4805

Produtos afetados

Ibm Db2

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2014-4805 · Nota de Segurança
• http://www-01.ibm.com/support/docview.wss?uid=swg21681723 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/95307 · Nota
• http://securitytracker.com/id/1030806 · Nota
• http://www-01.ibm.com/support/docview.wss?uid=swg1IT03761 · Aviso do Fabricante