Auth bypass in Ibm Db2 Universal Database
CVE-2010-3739
The audit facility in the Security component in IBM DB2 UDB 9.5 before FP6a uses instance-level audit settings to capture connection (aka CONNECT and AUTHENTICATION) events in certain circumstances in which database-level audit settings were intended, which might make it easier for remote attackers to connect without discovery.
Vulnerability class: Broken Authentication
EPSS: 0.011 (62.3th percentile) — read the EPSS interpretation.
Affected products
- Ibm Db2_universal_database — versions 9.5
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (vendor-advisory, Patch, Vendor Advisory, x_refsource_AIXAPAR)