IBM DB2 9.7 before FP2 does not perform the expected access control on the monitor administrative views in the SYSIBMADM schema, which allows remote attackers to obtain sensitive information via unspecified vectors.
http://www-01.ibm.com/support/docview.wss?uid=swg1IC67819
http://www-01.ibm.com/support/docview.wss?uid=swg21432298
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14430