PT-2014-6125 · Ibm · Ibm Db2

Published 2014-09-04 · Updated 2017-08-29 · CVE-2014-4805

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM DB2 version 10.5 before FP4

Description The issue allows local users to obtain sensitive information by reading a file while a LOAD operation is occurring during CDE table LOAD operations. This is due to the creation of temporary files.

Recommendations For IBM DB2 version 10.5 before FP4, update to FP4 or later to resolve the issue.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2014-4805

Affected Products

Ibm Db2

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2014-4805 · Security Note
• http://www-01.ibm.com/support/docview.wss?uid=swg1IT03761 · Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg21681723 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/95307 · Note
• http://securitytracker.com/id/1030806 · Note