CVEvulnerability
CVE-2015-1922
3.5 LOW
Official page ↗
- Status
- Modified
- Published
- 2015-07-20
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 3.5 LOW — AV:N/AC:M/Au:S/C:N/I:P/A:N
- Weaknesses
- CWE-284
Description
The Data Movement implementation in IBM DB2 9.7 through FP10, 9.8 through FP5, 10.1 before FP5, and 10.5 through FP5 on Linux, UNIX, and Windows allows remote authenticated users to bypass intended access restrictions and delete table rows via unspecified vectors.
Affected configurations
• ibm db2 9.7
• ibm db2 9.8
• ibm db2 10.1
• ibm db2 10.5
Related
Weakness · CWE (1)
- CWE-284 Improper Access Control weakness
References
- http://www-01.ibm.com/support/docview.wss?uid=swg1IT08523 Patch, Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg1IT08524 www-01.ibm.com
- http://www-01.ibm.com/support/docview.wss?uid=swg1IT08525 Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg1IT08526 www-01.ibm.com
- http://www-01.ibm.com/support/docview.wss?uid=swg21959650 www-01.ibm.com
- http://www.securityfocus.com/bid/75911 www.securityfocus.com
- http://www.securitytracker.com/id/1032879 www.securitytracker.com
- http://www-01.ibm.com/support/docview.wss?uid=swg1IT08523 Patch, Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg1IT08524 www-01.ibm.com
- http://www-01.ibm.com/support/docview.wss?uid=swg1IT08525 Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg1IT08526 www-01.ibm.com
- http://www-01.ibm.com/support/docview.wss?uid=swg21959650 www-01.ibm.com
- http://www.securityfocus.com/bid/75911 www.securityfocus.com
- http://www.securitytracker.com/id/1032879 www.securitytracker.com