CVE-2009-3472

IBM DB2 8-9.5 - Authenticated Unauthorized Table Row Manipulation

Title source: llm
STIX 2.1

Description

IBM DB2 8 before FP18, 9.1 before FP8, and 9.5 before FP4 allows remote authenticated users to bypass intended access restrictions, and update, insert, or delete table rows, via unspecified vectors.

References (8)

Core 8
Core References
Various Sources x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21403619
Various Sources vendor-advisory x_refsource_aixapar
http://www-01.ibm.com/support/docview.wss?uid=swg1IZ50078
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/36540
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/36890
Various Sources vendor-advisory x_refsource_aixapar
http://www-01.ibm.com/support/docview.wss?uid=swg1IZ50074
Various Sources vendor-advisory x_refsource_aixapar
http://www-01.ibm.com/support/docview.wss?uid=swg1IZ50079
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/58478
Vendor Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21386689

Scores

EPSS 0.0202
EPSS Percentile 78.9%

Details

CWE
CWE-264
Status published
Products (3)
ibm/db2 8.0 fp1 (17 CPE variants)
ibm/db2 9.1 fp1 (7 CPE variants)
ibm/db2 9.5 fp1 (3 CPE variants)
Published Sep 29, 2009
Tracked Since Feb 18, 2026