Published: 08/05/2015 Updated: 28/11/2016

CVSS v2 Base Score: 4 | Impact Score: 2.9 | Exploitability Score: 8

VMScore: 356

Vector: AV:N/AC:L/Au:S/C:P/I:N/A:N

IBM DB2 9.5 up to and including 10.5 on Linux, UNIX, and Windows stores passwords during the processing of certain SQL statements by the monitoring and audit facilities, which allows remote authenticated users to obtain sensitive information via commands associated with these facilities.

Vulnerable Product	Search on Vulmon	Subscribe to Product
ibm db2 9.7
ibm db2 9.8
ibm db2 10.1
ibm db2 10.5
ibm db2 9.5

CWE-200 http://www-01.ibm.com/support/docview.wss?uid=swg1IT07547 http://www-01.ibm.com/support/docview.wss?uid=swg1IT07552 http://www-01.ibm.com/support/docview.wss?uid=swg21698021 http://www-01.ibm.com/support/docview.wss?uid=swg1IT07397 http://www-01.ibm.com/support/docview.wss?uid=swg1IT07554 http://www-01.ibm.com/support/docview.wss?uid=swg1IT07553 http://www.securitytracker.com/id/1032247 http://www.securityfocus.com/bid/74217 https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2014-0919

Vulnerability Summary

Vulnerability Trend

References

Vulmon Search

About

Products

Connect