PT-2010-5033
CVE-2010-3739
·
Publicado
2010-10-05
·
Atualizado
2010-10-06
Descrição por
CVSS 2.0
6.4
MédiaMétricasAV:N/AC:L/Au:N/C:P/I:P/A:N
Name of the Vulnerable Software and Affected Versions
IBM DB2 UDB version 9.5 before FP6a
Description
The issue affects the audit facility in the Security component, where instance-level audit settings are used to capture connection events, such as CONNECT and AUTHENTICATION, under certain circumstances. This might allow remote attackers to connect without being detected, as the database-level audit settings are not applied as intended.
Recommendations
For IBM DB2 UDB version 9.5 before FP6a, apply FP6a to resolve the issue.
Explorabilidade
Correção
Impactos
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾