Lucene search

MitreCVE-2007-4418

HistoryAug 18, 2007 - 9:17 p.m.

CVE-2007-4418

2007-08-1821:17:00

mitre

web.nvd.nist.gov

ibm

db2

udb

fixpak 15

authorization

vulnerability

cve-2007-4418

nvd

CVSS2

5.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:P/A:P

AI Score

6.1

Confidence

Low

EPSS

0.007

Percentile

81.1%

JSON

IBM DB2 UDB 8 before Fixpak 15 does not properly check authorization, which allows remote authenticated users with a certain SELECT privilege to have an unknown impact via unspecified vectors. NOTE: this issue is probably related to CVE-2007-1089, but this is uncertain due to lack of details.

Affected configurations

Nvd

Node

ibmdb2_universal_databaseRange≤8.0fp14

VendorProductVersionCPE
ibmdb2_universal_database*cpe:2.3:a:ibm:db2_universal_database:*:fp14:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	db2_universal_database	*	cpe:2.3:a:ibm:db2_universal_database::fp14::::::*

References

secunia.com/advisories/26471

www-1.ibm.com/support/docview.wss?uid=swg1JR25940

www-1.ibm.com/support/docview.wss?uid=swg21255352

www.attrition.org/pipermail/vim/2007-August/001765.html

www.securityfocus.com/bid/25339

www.vupen.com/english/advisories/2007/2912

exchange.xforce.ibmcloud.com/vulnerabilities/36109

CVSS2

5.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:P/A:P

AI Score

6.1

Confidence

Low

EPSS

0.007

Percentile

81.1%

JSON

Related for CVE-2007-4418