PT-2010-5033
CVE-2010-3739
·
تاريخ النشر
2010-10-05
·
تاريخ التحديث
2010-10-06
الوصف من
CVSS 2.0
6.4
متوسطةالمقاييسAV:N/AC:L/Au:N/C:P/I:P/A:N
Name of the Vulnerable Software and Affected Versions
IBM DB2 UDB version 9.5 before FP6a
Description
The issue affects the audit facility in the Security component, where instance-level audit settings are used to capture connection events, such as CONNECT and AUTHENTICATION, under certain circumstances. This might allow remote attackers to connect without being detected, as the database-level audit settings are not applied as intended.
Recommendations
For IBM DB2 UDB version 9.5 before FP6a, apply FP6a to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾