low3.7
CVE-2017-1520
IBM DB2 9.7, 10,1, 10.5, and 11.1 is vulnerable to an unauthorized command that allows the database to be activated when authentication type is CLIENT.
Impact
IBM DB2 9.7, 10,1, 10.5, and 11.1 is vulnerable to an unauthorized command that allows the database to be activated when authentication type is CLIENT. IBM X-Force ID: 129830.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Db2 | Versions 9.7, 9.7.0.1, 9.7.0.2, 9.7.0.3, 9.7.0.4, 9.7.0.5 |
| Ibm | Db2 Connect | Versions 9.7, 9.7.0.1, 9.7.0.2, 9.7.0.3, 9.7.0.4, 9.7.0.5 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.ibm.com/support/docview.wss?uid=swg22007186
- http://www.securityfocus.com/bid/100684
- http://www.securitytracker.com/id/1039308
- https://exchange.xforce.ibmcloud.com/vulnerabilities/129830
- http://www.ibm.com/support/docview.wss?uid=swg22007186
- http://www.securityfocus.com/bid/100684
- http://www.securitytracker.com/id/1039308
- https://exchange.xforce.ibmcloud.com/vulnerabilities/129830