IBM DB2 Sensitive Information Disclosure Vulnerability

Last Update Date: 14 Sep 2020 10:18 Release Date: 14 Sep 2020 4469 Views

RISK: Medium Risk

TYPE: Servers - Database Servers

A vulnerability was identified in IBM DB2, a remote attacker could exploit the vulnerability to trigger sensitive information disclosure on the targeted system.

Impact

Information Disclosure

System / Technologies affected

IBM DB2 versions 11.1, 11.5

Solutions

Before installation of the software, please visit the vendor web-site for more details.

Apply fixes issued by the vendor:
https://www.ibm.com/support/pages/node/6330711

Vulnerability Identifier

CVE-2019-2949

Source

AusCERT
IBM