PT-2021-14053
CVE-2021-20579
·
تاريخ النشر
2021-06-24
·
تاريخ التحديث
2021-09-20
الوصف من
CVSS 3.1
6.5
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions:
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) versions 9.7, 10.1, 10.5, 11.1, and 11.5
Description:
The issue allows a user who can create a view or inline SQL function to obtain sensitive information when
AUTO REVAL is set to DEFFERED FORCE.Recommendations:
For versions 9.7, 10.1, 10.5, 11.1, and 11.5, consider restricting the ability to create views or inline SQL functions to minimize the risk of exploitation.
As a temporary workaround, consider setting
AUTO REVAL to a value other than DEFFERED FORCE until a patch is available. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾