[Forgot Password]
Login  Register Subscribe

30480

 
 

423868

 
 

253650

 
 

909

 
 

197367

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2013-4033Date: (C)2013-08-30   (M)2023-12-22


IBM DB2 and DB2 Connect 9.7 through FP8, 9.8 through FP5, 10.1 through FP2, and 10.5 through FP1 allow remote authenticated users to execute DML statements by leveraging EXPLAIN authority.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 4.6
Exploit Score: 3.9
Impact Score: 6.4
 
CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: HIGH
Authentication: SINGLE
Confidentiality: PARTIAL
Integrity: PARTIAL
Availability: PARTIAL
  
Reference:
IC94523
IC94756
IC94757
IC94758
db2-explain-cve20134033-priv-esc(86093)
http://www-01.ibm.com/support/docview.wss?uid=swg21646809

CPE    9
cpe:/a:ibm:db2:9.8
cpe:/a:ibm:db2_connect:10.5
cpe:/a:ibm:db2:9.7
cpe:/a:ibm:db2:10.5
...
CWE    1
CWE-264

© SecPod Technologies