VulnerabilityModified
CVE-2015-1922
The Data Movement implementation in IBM DB2 9.7 through FP10, 9.8 through FP5, 10.1 before FP5, and 10.5 through FP5 on Linux, UNIX, and Windows allows remote authenticated users to bypass intended access restrictions and delete table rows via…
LOW 3.5EPSS 1.75%
Does this matter?
Lower severity and a low EPSS score (1.75%). Track it; it rarely justifies an emergency change on its own.
Description
The Data Movement implementation in IBM DB2 9.7 through FP10, 9.8 through FP5, 10.1 before FP5, and 10.5 through FP5 on Linux, UNIX, and Windows allows remote authenticated users to bypass intended access restrictions and delete table rows via unspecified vectors.
- CVSS 2.0
- 3.5 LOWAV:N/AC:M/Au:S/C:N/I:P/A:N
- EPSS
- 1.75% probability · 77th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-284
- Affected
- ibm/db2
- Source
- psirt@us.ibm.com
References
- http://www-01.ibm.com/support/docview.wss?uid=swg1IT08523Patch, Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg1IT08524
- http://www-01.ibm.com/support/docview.wss?uid=swg1IT08525Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg1IT08526
- http://www-01.ibm.com/support/docview.wss?uid=swg21959650
- http://www.securityfocus.com/bid/75911
- http://www.securitytracker.com/id/1032879
- http://www-01.ibm.com/support/docview.wss?uid=swg1IT08523Patch, Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg1IT08524
- http://www-01.ibm.com/support/docview.wss?uid=swg1IT08525Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg1IT08526
- http://www-01.ibm.com/support/docview.wss?uid=swg21959650
- http://www.securityfocus.com/bid/75911
- http://www.securitytracker.com/id/1032879
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.