CVE-2017-1150
First published: Wed Mar 08 2017(Updated: )
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.1, 10.5, and 11.1 could allow an authenticated attacker with specialized access to tables that they should not be permitted to view. IBM Reference #: 1999515.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM DB2 Universal Database | =10.1 | |
| IBM DB2 Universal Database | =10.1 | |
| IBM DB2 Universal Database | =10.1 | |
| IBM DB2 Universal Database | =10.1 | |
| IBM DB2 Universal Database | =10.1 | |
| IBM DB2 Universal Database | =10.1 | |
| IBM DB2 Universal Database | =10.5 | |
| IBM DB2 Universal Database | =10.5 | |
| IBM DB2 Universal Database | =10.5 | |
| IBM DB2 Universal Database | =10.5 | |
| IBM DB2 Universal Database | =10.5 | |
| IBM DB2 Universal Database | =10.5 | |
| IBM DB2 Universal Database | =11.1 | |
| IBM DB2 Universal Database | =11.1 | |
| IBM DB2 Universal Database | =11.1 | |
| IBM DB2 Universal Database | =11.1 | |
| IBM DB2 Universal Database | =11.1 | |
| IBM DB2 Universal Database | =11.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2017-1150?
CVE-2017-1150 has been rated as a high severity vulnerability due to unauthorized access to sensitive data.
How do I fix CVE-2017-1150?
To fix CVE-2017-1150, ensure that you apply the appropriate security patches provided by IBM for DB2 versions 10.1, 10.5, and 11.1.
Who is affected by CVE-2017-1150?
CVE-2017-1150 affects users of IBM DB2 for Linux, UNIX, and Windows versions 10.1, 10.5, and 11.1.
What type of attack does CVE-2017-1150 enable?
CVE-2017-1150 enables authenticated attackers with specific table access to view data they should not access.
When was CVE-2017-1150 reported?
CVE-2017-1150 was reported as a security vulnerability in 2017.
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/references
- agent/author
- agent/remedy
- agent/last-modified-date
- agent/severity
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/ibm
- canonical/ibm db2 universal database
- version/ibm db2 universal database/10.1
- version/ibm db2 universal database/10.5
- version/ibm db2 universal database/11.1