PT-2010-2762 · Ibm · Ibm Db2 Content Manager (Cm) Toolkit+1

Published 2010-03-22 · Updated 2010-06-11 · CVE-2010-1041

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IBM DB2 Content Manager (CM) Toolkit versions 8.3 before FP13 IBM DB2 Information Integrator for Content versions 8.3 before FP13

Description The issue affects the single sign-on functionality in the Web Services implementation. It has unknown impact and can be exploited remotely.

Recommendations For IBM DB2 Content Manager (CM) Toolkit version 8.3, update to FP13 or later. For IBM DB2 Information Integrator for Content version 8.3, update to FP13 or later.

Fix

Related Identifiers

CVE-2010-1041

Affected Products

Ibm Db2 Content Manager (Cm) Toolkit

Ibm Db2 Information Integrator For Content

References · 9

• http://www-01.ibm.com/support/docview.wss?uid=swg1IO11283 · Vendor Advisory
• http://vupen.com/english/advisories/2010/0656 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-1041 · Security Note
• http://secunia.com/advisories/39025 · Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=isg1PM03804 · Patch, Vendor Advisory
• http://securitytracker.com/id?1023726 · Note
• http://www-01.ibm.com/support/docview.wss?uid=swg27018205&aid=1 · Note
• http://securityfocus.com/bid/38833 · Note
• http://osvdb.org/63079 · Note