CVE-2014-0919

Опубликовано: 08 мая 2015

Источник: nvd

CVSS2: 4

EPSS Низкий

Описание

IBM DB2 9.5 through 10.5 on Linux, UNIX, and Windows stores passwords during the processing of certain SQL statements by the monitoring and audit facilities, which allows remote authenticated users to obtain sensitive information via commands associated with these facilities.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:db2:9.5:*:*:*:advanced_enterprise:*:*:*

cpe:2.3:a:ibm:db2:9.5:*:*:*:advanced_workgroup:*:*:*

cpe:2.3:a:ibm:db2:9.5:*:*:*:enterprise:*:*:*

cpe:2.3:a:ibm:db2:9.5:*:*:*:express:*:*:*

cpe:2.3:a:ibm:db2:9.5:*:*:*:workgroup:*:*:*

cpe:2.3:a:ibm:db2:9.7:*:*:*:advanced_enterprise:*:*:*

cpe:2.3:a:ibm:db2:9.7:*:*:*:advanced_workgroup:*:*:*

cpe:2.3:a:ibm:db2:9.7:*:*:*:enterprise:*:*:*

cpe:2.3:a:ibm:db2:9.7:*:*:*:express:*:*:*

cpe:2.3:a:ibm:db2:9.7:*:*:*:workgroup:*:*:*

cpe:2.3:a:ibm:db2:9.8:*:*:*:advanced_enterprise:*:*:*

cpe:2.3:a:ibm:db2:9.8:*:*:*:advanced_workgroup:*:*:*

cpe:2.3:a:ibm:db2:9.8:*:*:*:enterprise:*:*:*

cpe:2.3:a:ibm:db2:9.8:*:*:*:express:*:*:*

cpe:2.3:a:ibm:db2:9.8:*:*:*:workgroup:*:*:*

cpe:2.3:a:ibm:db2:10.1:*:*:*:advanced_enterprise:*:*:*

cpe:2.3:a:ibm:db2:10.1:*:*:*:advanced_workgroup:*:*:*

cpe:2.3:a:ibm:db2:10.1:*:*:*:enterprise:*:*:*

cpe:2.3:a:ibm:db2:10.1:*:*:*:express:*:*:*

cpe:2.3:a:ibm:db2:10.1:*:*:*:workgroup:*:*:*

cpe:2.3:a:ibm:db2:10.5:*:*:*:advanced_enterprise:*:*:*

cpe:2.3:a:ibm:db2:10.5:*:*:*:advanced_workgroup:*:*:*

cpe:2.3:a:ibm:db2:10.5:*:*:*:enterprise:*:*:*

cpe:2.3:a:ibm:db2:10.5:*:*:*:express:*:*:*

cpe:2.3:a:ibm:db2:10.5:*:*:*:workgroup:*:*:*

EPSS

Процентиль: 57%

0.00355

Низкий

4 Medium

CVSS2

Дефекты

CWE-200

Связанные уязвимости

CVE-2014-0919

ubuntu

больше 10 лет назад

GHSA-2qr8-j262-h7fw

github

больше 3 лет назад