4

CVE-2015-1883

IBM DB2 9.7 through FP10, 9.8 through FP5, 10.1 before FP5, and 10.5 through FP5 on Linux, UNIX, and Windows allows remote authenticated users to read certain administrative files via crafted use of an automated-maintenance policy stored procedure.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Db2 Version 9.7 SwEdition advanced_enterprise
Ibm ≫ Db2 Version 9.7 SwEdition advanced_workgroup
Ibm ≫ Db2 Version 9.7 SwEdition enterprise
Ibm ≫ Db2 Version 9.7 SwEdition express
Ibm ≫ Db2 Version 9.7 SwEdition workgroup
Ibm ≫ Db2 Version 9.8 SwEdition advanced_enterprise
Ibm ≫ Db2 Version 9.8 SwEdition advanced_workgroup
Ibm ≫ Db2 Version 9.8 SwEdition enterprise
Ibm ≫ Db2 Version 9.8 SwEdition express
Ibm ≫ Db2 Version 9.8 SwEdition workgroup
Ibm ≫ Db2 Version 10.1 SwEdition advanced_enterprise
Ibm ≫ Db2 Version 10.1 SwEdition advanced_workgroup
Ibm ≫ Db2 Version 10.1 SwEdition enterprise
Ibm ≫ Db2 Version 10.1 SwEdition express
Ibm ≫ Db2 Version 10.1 SwEdition workgroup
Ibm ≫ Db2 Version 10.5 SwEdition advanced_enterprise
Ibm ≫ Db2 Version 10.5 SwEdition advanced_workgroup
Ibm ≫ Db2 Version 10.5 SwEdition enterprise
Ibm ≫ Db2 Version 10.5 SwEdition express
Ibm ≫ Db2 Version 10.5 SwEdition workgroup
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.9% 0.769
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4 8 2.9
AV:N/AC:L/Au:S/C:P/I:N/A:N
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

http://www-01.ibm.com/support/docview.wss?uid=swg1IT08075
http://www-01.ibm.com/support/docview.wss?uid=swg1IT08080
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg1IT08085
http://www-01.ibm.com/support/docview.wss?uid=swg1IT08086
http://www-01.ibm.com/support/docview.wss?uid=swg21698308
Patch
Vendor Advisory
http://www.securityfocus.com/bid/75946
http://www.securitytracker.com/id/1032881