CVE-2017-1434

Опубликовано: 12 сент. 2017

Источник: nvd

CVSS3: 4.7

CVSS2: 2.1

EPSS Низкий

Описание

IBM DB2 for Linux, UNIX and Windows 11.1 (includes DB2 Connect Server) under unusual circumstances, could expose highly sensitive information in the error log to a local user.

Ссылки

http://www.ibm.com/support/docview.wss?uid=swg22005740
Mitigation
Patch
Vendor Advisory
http://www.securityfocus.com/bid/100693
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1039297
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/127806
Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=swg22005740
Mitigation
Patch
Vendor Advisory
http://www.securityfocus.com/bid/100693
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1039297
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/127806
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:a:ibm:db2:11.1.0.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:db2_connect:11.1.0.0:*:*:*:*:*:*:*

Одно из

cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

EPSS

Процентиль: 21%

0.00068

Низкий

4.7 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-200

Связанные уязвимости

GHSA-r6p4-fqpw-3cj4