CVE-2014-0919 | BDVDB-2026-69280 Detail
Description#
IBM DB2 9.5 through 10.5 on Linux, UNIX, and Windows stores passwords during the processing of certain SQL statements by the monitoring and audit facilities, which allows remote authenticated users to obtain sensitive information via commands associated with these facilities.
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- http://www-01.ibm.com/support/docview.wss?uid=swg1IT07553
- http://www-01.ibm.com/support/docview.wss?uid=swg1IT07554
- http://www-01.ibm.com/support/docview.wss?uid=swg1IT07547
- http://www-01.ibm.com/support/docview.wss?uid=swg1IT07552
- http://www.securitytracker.com/id/1032247
- http://www.securityfocus.com/bid/74217
- http://www-01.ibm.com/support/docview.wss?uid=swg21698021
- http://www-01.ibm.com/support/docview.wss?uid=swg1IT07397
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.