CVE-2015-1883

IBM DB2 9.7 through FP10, 9.8 through FP5, 10.1 before FP5, and 10.5 through FP5 on Linux, UNIX, and Windows allows remote authenticated users to read certain administrative files via crafted use of an automated-maintenance policy stored procedure.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:ibm:db2:9.7:*:*:*:advanced_enterprise:*:*:*
cpe:2.3:a:ibm:db2:9.7:*:*:*:advanced_workgroup:*:*:*
cpe:2.3:a:ibm:db2:9.7:*:*:*:enterprise:*:*:*
cpe:2.3:a:ibm:db2:9.7:*:*:*:express:*:*:*
cpe:2.3:a:ibm:db2:9.7:*:*:*:workgroup:*:*:*
cpe:2.3:a:ibm:db2:9.8:*:*:*:advanced_enterprise:*:*:*
cpe:2.3:a:ibm:db2:9.8:*:*:*:advanced_workgroup:*:*:*
cpe:2.3:a:ibm:db2:9.8:*:*:*:enterprise:*:*:*
cpe:2.3:a:ibm:db2:9.8:*:*:*:express:*:*:*
cpe:2.3:a:ibm:db2:9.8:*:*:*:workgroup:*:*:*
cpe:2.3:a:ibm:db2:10.1:*:*:*:advanced_enterprise:*:*:*
cpe:2.3:a:ibm:db2:10.1:*:*:*:advanced_workgroup:*:*:*
cpe:2.3:a:ibm:db2:10.1:*:*:*:enterprise:*:*:*
cpe:2.3:a:ibm:db2:10.1:*:*:*:express:*:*:*
cpe:2.3:a:ibm:db2:10.1:*:*:*:workgroup:*:*:*
cpe:2.3:a:ibm:db2:10.5:*:*:*:advanced_enterprise:*:*:*
cpe:2.3:a:ibm:db2:10.5:*:*:*:advanced_workgroup:*:*:*
cpe:2.3:a:ibm:db2:10.5:*:*:*:enterprise:*:*:*
cpe:2.3:a:ibm:db2:10.5:*:*:*:express:*:*:*
cpe:2.3:a:ibm:db2:10.5:*:*:*:workgroup:*:*:*

History

21 Nov 2024, 02:26

Type Values Removed Values Added
References () http://www-01.ibm.com/support/docview.wss?uid=swg1IT08075 - () http://www-01.ibm.com/support/docview.wss?uid=swg1IT08075 -
References () http://www-01.ibm.com/support/docview.wss?uid=swg1IT08080 - Vendor Advisory () http://www-01.ibm.com/support/docview.wss?uid=swg1IT08080 - Vendor Advisory
References () http://www-01.ibm.com/support/docview.wss?uid=swg1IT08085 - () http://www-01.ibm.com/support/docview.wss?uid=swg1IT08085 -
References () http://www-01.ibm.com/support/docview.wss?uid=swg1IT08086 - () http://www-01.ibm.com/support/docview.wss?uid=swg1IT08086 -
References () http://www-01.ibm.com/support/docview.wss?uid=swg21698308 - Patch, Vendor Advisory () http://www-01.ibm.com/support/docview.wss?uid=swg21698308 - Patch, Vendor Advisory
References () http://www.securityfocus.com/bid/75946 - () http://www.securityfocus.com/bid/75946 -
References () http://www.securitytracker.com/id/1032881 - () http://www.securitytracker.com/id/1032881 -

Information

Published : 2015-07-20 01:59

Updated : 2025-04-12 10:46


NVD link : CVE-2015-1883

Mitre link : CVE-2015-1883

CVE.ORG link : CVE-2015-1883


JSON object : View

Products Affected

ibm

  • db2
CWE
CWE-200

Exposure of Sensitive Information to an Unauthorized Actor