Lucene search

IbmCVE-2015-1883

HistoryJul 20, 2015 - 1:59 a.m.

CVE-2015-1883

2015-07-2001:59:04

CWE-200

ibm

web.nvd.nist.gov

ibm

db2

security

vulnerability

cve-2015-1883

linux

unix

windows

authenticated users

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

AI Score

5.9

Confidence

Low

EPSS

0.002

Percentile

56.2%

JSON

IBM DB2 9.7 through FP10, 9.8 through FP5, 10.1 before FP5, and 10.5 through FP5 on Linux, UNIX, and Windows allows remote authenticated users to read certain administrative files via crafted use of an automated-maintenance policy stored procedure.

Affected configurations

Nvd

Node

ibmdb2Match9.7advanced_enterprise

ibmdb2Match9.7advanced_workgroup

ibmdb2Match9.7enterprise

ibmdb2Match9.7express

ibmdb2Match9.7workgroup

ibmdb2Match9.8advanced_enterprise

ibmdb2Match9.8advanced_workgroup

ibmdb2Match9.8enterprise

ibmdb2Match9.8express

ibmdb2Match9.8workgroup

ibmdb2Match10.1advanced_enterprise

ibmdb2Match10.1advanced_workgroup

ibmdb2Match10.1enterprise

ibmdb2Match10.1express

ibmdb2Match10.1workgroup

ibmdb2Match10.5advanced_enterprise

ibmdb2Match10.5advanced_workgroup

ibmdb2Match10.5enterprise

ibmdb2Match10.5express

ibmdb2Match10.5workgroup

VendorProductVersionCPE
ibmdb29.7cpe:2.3:a:ibm:db2:9.7:*:*:*:advanced_enterprise:*:*:*
ibmdb29.7cpe:2.3:a:ibm:db2:9.7:*:*:*:advanced_workgroup:*:*:*
ibmdb29.7cpe:2.3:a:ibm:db2:9.7:*:*:*:enterprise:*:*:*
ibmdb29.7cpe:2.3:a:ibm:db2:9.7:*:*:*:express:*:*:*
ibmdb29.7cpe:2.3:a:ibm:db2:9.7:*:*:*:workgroup:*:*:*
ibmdb29.8cpe:2.3:a:ibm:db2:9.8:*:*:*:advanced_enterprise:*:*:*
ibmdb29.8cpe:2.3:a:ibm:db2:9.8:*:*:*:advanced_workgroup:*:*:*
ibmdb29.8cpe:2.3:a:ibm:db2:9.8:*:*:*:enterprise:*:*:*
ibmdb29.8cpe:2.3:a:ibm:db2:9.8:*:*:*:express:*:*:*
ibmdb29.8cpe:2.3:a:ibm:db2:9.8:*:*:*:workgroup:*:*:*

Vendor	Product	Version	CPE
ibm	db2	9.7	cpe:2.3:a:ibm:db2:9.7::::advanced_enterprise:::
ibm	db2	9.7	cpe:2.3:a:ibm:db2:9.7::::advanced_workgroup:::
ibm	db2	9.7	cpe:2.3:a:ibm:db2:9.7::::enterprise:::
ibm	db2	9.7	cpe:2.3:a:ibm:db2:9.7::::express:::
ibm	db2	9.7	cpe:2.3:a:ibm:db2:9.7::::workgroup:::
ibm	db2	9.8	cpe:2.3:a:ibm:db2:9.8::::advanced_enterprise:::
ibm	db2	9.8	cpe:2.3:a:ibm:db2:9.8::::advanced_workgroup:::
ibm	db2	9.8	cpe:2.3:a:ibm:db2:9.8::::enterprise:::
ibm	db2	9.8	cpe:2.3:a:ibm:db2:9.8::::express:::
ibm	db2	9.8	cpe:2.3:a:ibm:db2:9.8::::workgroup:::