CVE-2014-0919: Infoleak
IBM DB2 9.5 through 10.5 on Linux, UNIX, and Windows stores passwords during the processing of certain SQL statements by the monitoring and audit facilities, which allows remote authenticated users to obtain sensitive information via commands associated with these facilities.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2014-0919?
CVE-2014-0919 is rated as a medium severity vulnerability due to its potential to leak sensitive information.
How do I fix CVE-2014-0919?
To fix CVE-2014-0919, update IBM DB2 to the latest version that addresses this vulnerability.
What systems are affected by CVE-2014-0919?
CVE-2014-0919 affects IBM DB2 versions 9.5 through 10.5 on Linux, UNIX, and Windows platforms.
What type of information can be exposed due to CVE-2014-0919?
CVE-2014-0919 can expose sensitive password information stored during SQL statement processing.
Can CVE-2014-0919 be exploited remotely?
Yes, CVE-2014-0919 can be exploited by remote authenticated users through monitoring and audit command facilities.