Test Kennung:	1.3.6.1.4.1.25623.1.0.812266
Kategorie:	Databases
Titel:	IBM Db2 Information Disclosure Vulnerability (Dec 2017)
Zusammenfassung:	IBM DB2 is prone to an information disclosure vulnerability.
Beschreibung:	Summary: IBM DB2 is prone to an information disclosure vulnerability. Vulnerability Insight: The flaw exists as during certain LOAD operations into Columnar Data Engine (CDE) tables, a temporary file containing user data may be created at the Db2 server. As the file only exists for the duration of the LOAD operation and is automatically removed on completion (both success and error), the vulnerability exists only temporarily. Vulnerability Impact: Successful exploitation will allow attackers to obtain sensitive information that may aid in further attacks. Affected Software/OS: IBM Db2 10.5 before FP4. Solution: Apply the appropriate fix from reference link CVSS Score: 2.1 CVSS Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2014-4805 AIX APAR: IT03761 http://www-01.ibm.com/support/docview.wss?uid=swg1IT03761 http://www.securitytracker.com/id/1030806 XForce ISS Database: ibm-db2-cve20144805-info-disc(95307) https://exchange.xforce.ibmcloud.com/vulnerabilities/95307
Copyright	Copyright (C) 2017 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.