CVE-2014-0919

Опубликовано: 08 мая 2015

Источник: nvd

CVSS2: 4

EPSS Низкий

Описание

IBM DB2 9.5 through 10.5 on Linux, UNIX, and Windows stores passwords during the processing of certain SQL statements by the monitoring and audit facilities, which allows remote authenticated users to obtain sensitive information via commands associated with these facilities.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:db2:9.5:*:*:*:advanced_enterprise:*:*:*

cpe:2.3:a:ibm:db2:9.5:*:*:*:advanced_workgroup:*:*:*

cpe:2.3:a:ibm:db2:9.5:*:*:*:enterprise:*:*:*

cpe:2.3:a:ibm:db2:9.5:*:*:*:express:*:*:*

cpe:2.3:a:ibm:db2:9.5:*:*:*:workgroup:*:*:*

cpe:2.3:a:ibm:db2:9.7:*:*:*:advanced_enterprise:*:*:*

cpe:2.3:a:ibm:db2:9.7:*:*:*:advanced_workgroup:*:*:*

cpe:2.3:a:ibm:db2:9.7:*:*:*:enterprise:*:*:*

cpe:2.3:a:ibm:db2:9.7:*:*:*:express:*:*:*

cpe:2.3:a:ibm:db2:9.7:*:*:*:workgroup:*:*:*

cpe:2.3:a:ibm:db2:9.8:*:*:*:advanced_enterprise:*:*:*

cpe:2.3:a:ibm:db2:9.8:*:*:*:advanced_workgroup:*:*:*

cpe:2.3:a:ibm:db2:9.8:*:*:*:enterprise:*:*:*

cpe:2.3:a:ibm:db2:9.8:*:*:*:express:*:*:*

cpe:2.3:a:ibm:db2:9.8:*:*:*:workgroup:*:*:*

cpe:2.3:a:ibm:db2:10.1:*:*:*:advanced_enterprise:*:*:*

cpe:2.3:a:ibm:db2:10.1:*:*:*:advanced_workgroup:*:*:*

cpe:2.3:a:ibm:db2:10.1:*:*:*:enterprise:*:*:*

cpe:2.3:a:ibm:db2:10.1:*:*:*:express:*:*:*

cpe:2.3:a:ibm:db2:10.1:*:*:*:workgroup:*:*:*

cpe:2.3:a:ibm:db2:10.5:*:*:*:advanced_enterprise:*:*:*

cpe:2.3:a:ibm:db2:10.5:*:*:*:advanced_workgroup:*:*:*

cpe:2.3:a:ibm:db2:10.5:*:*:*:enterprise:*:*:*

cpe:2.3:a:ibm:db2:10.5:*:*:*:express:*:*:*

cpe:2.3:a:ibm:db2:10.5:*:*:*:workgroup:*:*:*

EPSS

Процентиль: 78%

0.01901

Низкий

4 Medium

CVSS2

Дефекты

CWE-200

Связанные уязвимости

CVE-2014-0919

ubuntu

около 11 лет назад

GHSA-2qr8-j262-h7fw

github

около 4 лет назад