CVE-2009-3472: Medium severity ibm db2 universal database vulnerability
IBM DB2 8 before FP18, 9.1 before FP8, and 9.5 before FP4 allows remote authenticated users to bypass intended access restrictions, and update, insert, or delete table rows, via unspecified vectors.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2009-3472?
CVE-2009-3472 is considered a medium severity vulnerability due to its ability to allow unauthorized access to sensitive data.
How do I fix CVE-2009-3472?
To fix CVE-2009-3472, it is essential to apply the latest fix pack for your version of IBM DB2.
Who is affected by CVE-2009-3472?
CVE-2009-3472 affects remote authenticated users of IBM DB2 versions 8 and 9 prior to the specified fix packs.
What are the consequences of CVE-2009-3472?
If exploited, CVE-2009-3472 may allow attackers to bypass access restrictions, leading to data manipulation such as updates, inserts, or deletions.
Is there a workaround for CVE-2009-3472?
While the best solution is to apply the fix, temporary mitigations may involve restricting remote authenticated user access until the fix is implemented.