CVE-2008-4693: Infoleak
The SORT/LIST SERVICES component in IBM DB2 9.1 before FP6 and 9.5 before FP2 writes sensitive information to the trace output, which allows attackers to obtain sensitive information by reading "PASSWORD-RELATED CONNECTION STRING KEYWORD VALUES."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-4693?
CVE-2008-4693 is categorized as a medium severity vulnerability due to its potential to expose sensitive information.
How does CVE-2008-4693 affect IBM Db2?
CVE-2008-4693 affects IBM Db2 versions 9.1 before FP6 and 9.5 before FP2 by allowing sensitive information to be written to trace output.
How do I fix CVE-2008-4693?
To fix CVE-2008-4693, upgrade IBM Db2 to version 9.1 FP6 or later, or 9.5 FP2 or later.
What types of information are exposed by CVE-2008-4693?
CVE-2008-4693 may expose PASSWORD-RELATED CONNECTION STRING KEYWORD VALUES which can lead to unauthorized access.
Is there a workaround for CVE-2008-4693?
There is no official workaround for CVE-2008-4693; upgrading is the recommended mitigation.