Information disclosure in IBM Db2

CVE-2012-2196

IBM DB2 9.1 before FP12, 9.5 through FP9, 9.7 through FP6, 9.8 through FP5, and 10.1 allows remote attackers to read arbitrary XML files via the (1) GET_WRAP_CFG_C or (2) GET_WRAP_CFG_C2 stored procedure.

Vulnerability class: Information Disclosure

EPSS: 0.024 (82.3th percentile) — read the EPSS interpretation.

Affected products

  • Ibm Db2 — versions 9.1, 9.1.0.1, 9.1.0.2
  • N/a — versions n/a

Weakness classification (CWE)

References