Description

IBM DB2 9.7 before FP2 does not perform the expected access control on the monitor administrative views in the SYSIBMADM schema, which allows remote attackers to obtain sensitive information via unspecified vectors.

References

http://www-01.ibm.com/support/docview.wss?uid=swg1IC67819

http://www-01.ibm.com/support/docview.wss?uid=swg21432298

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14430

Details

Risk Information

CVSS v2