Vulnerability in IBM Db2

CVE-2010-3197

IBM DB2 9.7 before FP2 does not perform the expected access control on the monitor administrative views in the SYSIBMADM schema, which allows remote attackers to obtain sensitive information via unspecified vectors.

EPSS: 0.019 (77.3th percentile) — read the EPSS interpretation.

Affected products

Ibm Db2 — versions 9.7
N/a — versions n/a

Weakness classification (CWE)

CWE-264

References

cve@mitre.org (signature, x_refsource_OVAL, vdb-entry)
cve@mitre.org (vendor-advisory, x_refsource_AIXAPAR, Vendor Advisory)
cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)