VulnerabilityModified
CVE-2015-1883
IBM DB2 9.7 through FP10, 9.8 through FP5, 10.1 before FP5, and 10.5 through FP5 on Linux, UNIX, and Windows allows remote authenticated users to read certain administrative files via crafted use of an automated-maintenance policy stored procedure.
MEDIUM 4.0EPSS 1.90%
Does this matter?
Lower severity and a low EPSS score (1.90%). Track it; it rarely justifies an emergency change on its own.
Description
IBM DB2 9.7 through FP10, 9.8 through FP5, 10.1 before FP5, and 10.5 through FP5 on Linux, UNIX, and Windows allows remote authenticated users to read certain administrative files via crafted use of an automated-maintenance policy stored procedure.
- CVSS 2.0
- 4.0 MEDIUMAV:N/AC:L/Au:S/C:P/I:N/A:N
- EPSS
- 1.90% probability · 78th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-200
- Affected
- ibm/db2
- Source
- psirt@us.ibm.com
References
- http://www-01.ibm.com/support/docview.wss?uid=swg1IT08075
- http://www-01.ibm.com/support/docview.wss?uid=swg1IT08080Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg1IT08085
- http://www-01.ibm.com/support/docview.wss?uid=swg1IT08086
- http://www-01.ibm.com/support/docview.wss?uid=swg21698308Patch, Vendor Advisory
- http://www.securityfocus.com/bid/75946
- http://www.securitytracker.com/id/1032881
- http://www-01.ibm.com/support/docview.wss?uid=swg1IT08075
- http://www-01.ibm.com/support/docview.wss?uid=swg1IT08080Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg1IT08085
- http://www-01.ibm.com/support/docview.wss?uid=swg1IT08086
- http://www-01.ibm.com/support/docview.wss?uid=swg21698308Patch, Vendor Advisory
- http://www.securityfocus.com/bid/75946
- http://www.securitytracker.com/id/1032881
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.