PT-2017-12054 · Ibm · Ibm Db2

Publicado 2017-03-08 · Atualizado 2019-10-03 · CVE-2017-1150

Positive Technologies (AI Summary)

CVSS v2.0

3.5

Baixa

Vetor base

AV:N/AC:M/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) versions 10.1, 10.5, and 11.1

Description The issue allows an authenticated attacker with specialized access to view tables that they should not be permitted to access.

Recommendations For versions 10.1, 10.5, and 11.1, update to a version that includes the fix for IBM Reference #: 1999515 to prevent unauthorized access to sensitive tables.

Correção

Improper Privilege Management

Enumeração de Fraquezas

CWE-269

Identificadores relacionados

CVE-2017-1150

Produtos afetados

Ibm Db2

Referências · 5

• http://securityfocus.com/bid/96597 · Nota
• http://ibm.com/support/docview.wss?uid=swg21999515 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-1150 · Nota de Segurança
• http://securitytracker.com/id/1037946 · Nota
• https://osv.dev/vulnerability/CVE-2017-1150 · Aviso do Fabricante