Test ID:	1.3.6.1.4.1.25623.1.0.812266
Category:	Databases
Title:	IBM Db2 Information Disclosure Vulnerability (Dec 2017)
Summary:	IBM DB2 is prone to an information disclosure vulnerability.
Description:	Summary: IBM DB2 is prone to an information disclosure vulnerability. Vulnerability Insight: The flaw exists as during certain LOAD operations into Columnar Data Engine (CDE) tables, a temporary file containing user data may be created at the Db2 server. As the file only exists for the duration of the LOAD operation and is automatically removed on completion (both success and error), the vulnerability exists only temporarily. Vulnerability Impact: Successful exploitation will allow attackers to obtain sensitive information that may aid in further attacks. Affected Software/OS: IBM Db2 10.5 before FP4. Solution: Apply the appropriate fix from reference link CVSS Score: 2.1 CVSS Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2014-4805 AIX APAR: IT03761 http://www-01.ibm.com/support/docview.wss?uid=swg1IT03761 http://www.securitytracker.com/id/1030806 XForce ISS Database: ibm-db2-cve20144805-info-disc(95307) https://exchange.xforce.ibmcloud.com/vulnerabilities/95307
Copyright	Copyright (C) 2017 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.