ID de Prueba:	1.3.6.1.4.1.25623.1.0.812266
Categoría:	Databases
Título:	IBM Db2 Information Disclosure Vulnerability (Dec 2017)
Resumen:	IBM DB2 is prone to an information disclosure vulnerability.
Descripción:	Summary: IBM DB2 is prone to an information disclosure vulnerability. Vulnerability Insight: The flaw exists as during certain LOAD operations into Columnar Data Engine (CDE) tables, a temporary file containing user data may be created at the Db2 server. As the file only exists for the duration of the LOAD operation and is automatically removed on completion (both success and error), the vulnerability exists only temporarily. Vulnerability Impact: Successful exploitation will allow attackers to obtain sensitive information that may aid in further attacks. Affected Software/OS: IBM Db2 10.5 before FP4. Solution: Apply the appropriate fix from reference link CVSS Score: 2.1 CVSS Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2014-4805 AIX APAR: IT03761 http://www-01.ibm.com/support/docview.wss?uid=swg1IT03761 http://www.securitytracker.com/id/1030806 XForce ISS Database: ibm-db2-cve20144805-info-disc(95307) https://exchange.xforce.ibmcloud.com/vulnerabilities/95307
Copyright	Copyright (C) 2017 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.