Information disclosure in IBM Aix

CVE-2014-4805

IBM DB2 10.5 before FP4 on Linux and AIX creates temporary files during CDE table LOAD operations, which allows local users to obtain sensitive information by reading a file while a LOAD is occurring.

Vulnerability class: Information Disclosure

EPSS: 0.004 (30.9th percentile) — read the EPSS interpretation.

Affected products

Ibm Aix
Ibm Db2 — versions 10.5, 10.5.0.1, 10.5.0.2
Linux Linux_kernel
N/a — versions n/a

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

psirt@us.ibm.com (vendor-advisory, Patch, Vendor Advisory, x_refsource_AIXAPAR)
psirt@us.ibm.com (vdb-entry, x_refsource_XF)
psirt@us.ibm.com (x_refsource_CONFIRM)
psirt@us.ibm.com (vdb-entry, x_refsource_SECTRACK)