Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3f39-gxh3-r25v

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью

Описание

The Security component in IBM DB2 UDB 9.5 before FP6a logs AUDIT events by using a USERID and an AUTHID value corresponding to the instance owner, instead of a USERID and an AUTHID value corresponding to the logged-in user account, which makes it easier for remote authenticated users to execute Audit administration commands without discovery.

The Security component in IBM DB2 UDB 9.5 before FP6a logs AUDIT events by using a USERID and an AUTHID value corresponding to the instance owner, instead of a USERID and an AUTHID value corresponding to the logged-in user account, which makes it easier for remote authenticated users to execute Audit administration commands without discovery.

EPSS

Процентиль: 48%
0.00246
Низкий

Связанные уязвимости

nvd
больше 15 лет назад

The Security component in IBM DB2 UDB 9.5 before FP6a logs AUDIT events by using a USERID and an AUTHID value corresponding to the instance owner, instead of a USERID and an AUTHID value corresponding to the logged-in user account, which makes it easier for remote authenticated users to execute Audit administration commands without discovery.

EPSS

Процентиль: 48%
0.00246
Низкий