CVEvulnerability
CVE-2009-1239
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2009-04-03
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-200
Description
IBM DB2 9.1 before FP7 returns incorrect query results in certain situations related to the order of application of an INNER JOIN predicate and an OUTER JOIN predicate, which might allow attackers to obtain sensitive information via a crafted query.
Affected configurations
• ibm db2 (<= 9.1)
• ibm db2 9.1
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- http://www-01.ibm.com/support/docview.wss?uid=swg1JR31886 Patch
- http://www-01.ibm.com/support/docview.wss?uid=swg21381257 Patch, Vendor Advisory
- http://www.vupen.com/english/advisories/2009/0912 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/49864 exchange.xforce.ibmcloud.com
- http://www-01.ibm.com/support/docview.wss?uid=swg1JR31886 Patch
- http://www-01.ibm.com/support/docview.wss?uid=swg21381257 Patch, Vendor Advisory
- http://www.vupen.com/english/advisories/2009/0912 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/49864 exchange.xforce.ibmcloud.com