CVE-2019-4102
MEDIUMIBM DB2 9.7, 10.1, 10.5, 11.0 - Inadequate Encryption Strength
Title source: llmDescription
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 158092.
References (3)
Core 3
Core References
Patch, Vendor Advisory x_refsource_confirm
https://www.ibm.com/support/docview.wss?uid=ibm10880743
VDB Entry, Vendor Advisory vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/158092
Broken Link, Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/109026
Scores
CVSS v3
5.9
EPSS
0.0118
EPSS Percentile
63.5%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Details
CWE
CWE-326
Status
published
Products (35)
ibm/db2
9.7.0.0
ibm/db2
9.7.0.1
ibm/db2
9.7.0.2
ibm/db2
9.7.0.3
ibm/db2
9.7.0.4
ibm/db2
9.7.0.5
ibm/db2
9.7.0.6
ibm/db2
9.7.0.7
ibm/db2
9.7.0.8
ibm/db2
9.7.0.9
... and 25 more
Published
Jul 01, 2019
Tracked Since
Feb 18, 2026