CVE-2009-3473

EPSS 0.6%
Published 29.09.2009 21:30:00
Last modified 09.04.2025 00:30:58
Source cve@mitre.org
Teams watchlist Login
Open Login

IBM DB2 9.1 before FP8 does not require the SETSESSIONUSER privilege for the SET SESSION AUTHORIZATION statement, which has unspecified impact and remote attack vectors.

Affected products Warnungen 0 Metrics 2 CWE 0 References 8

Data is provided by the National Vulnerability Database (NVD)

Ibm ≫ Db2 Version9.1 Updatefp1

Ibm ≫ Db2 Version9.1 Updatefp2

Ibm ≫ Db2 Version9.1 Updatefp3

Ibm ≫ Db2 Version9.1 Updatefp4

Ibm ≫ Db2 Version9.1 Updatefp5

Ibm ≫ Db2 Version9.1 Updatefp6

Ibm ≫ Db2 Version9.1 Updatefp7

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.6%	0.669

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	10	10	10	AV:N/AC:L/Au:N/C:C/I:C/A:C

http://www.securityfocus.com/bid/36540

http://secunia.com/advisories/36890

Vendor Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21403619

http://osvdb.org/58479

http://www-01.ibm.com/support/docview.wss?uid=swg1IZ55883

https://nvd.nist.gov/vuln/detail/CVE-2009-3473

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2009-3473

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2009-3473

EUVD