IBM DB2 9.7 before FP2 does not perform the expected access control on the monitor administrative views in the SYSIBMADM schema, which allows remote attackers to obtain sensitive information via unspecified vectors.
References
Configurations
Information
Published : 2010-08-31 15:00
Updated : 2017-09-18 18:31
NVD link : CVE-2010-3197
Mitre link : CVE-2010-3197
JSON object : View
CWE
CWE-264
Permissions, Privileges, and Access Controls
Products Affected
ibm
- db2