PT-2017-12054 · Ibm · Ibm Db2

Published 2017-03-08 · Updated 2019-10-03 · CVE-2017-1150

Positive Technologies (AI Summary)

CVSS v2.0

3.5

Low

Base vector

AV:N/AC:M/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) versions 10.1, 10.5, and 11.1

Description The issue allows an authenticated attacker with specialized access to view tables that they should not be permitted to access.

Recommendations For versions 10.1, 10.5, and 11.1, update to a version that includes the fix for IBM Reference #: 1999515 to prevent unauthorized access to sensitive tables.

Fix

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2017-1150

Affected Products

Ibm Db2

References · 5

• http://ibm.com/support/docview.wss?uid=swg21999515 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-1150 · Security Note
• https://osv.dev/vulnerability/CVE-2017-1150 · Vendor Advisory
• http://securityfocus.com/bid/96597 · Note
• http://securitytracker.com/id/1037946 · Note