CVE-2017-1434: Infoleak
Published Sep 12, 2017
·Updated
IBM DB2 for Linux, UNIX and Windows 11.1 (includes DB2 Connect Server) under unusual circumstances, could expose highly sensitive information in the error log to a local user.
Affected Software
4 affected components
IBM DB2=11.1.0.0
IBM DB2 Connect=11.1.0.0
Linux Linux kernel
Microsoft Windows
Remediation
Patch Available
Event History
Sep 12, 2017
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2017-1434?
The severity of CVE-2017-1434 is classified as moderate.
2
How do I fix CVE-2017-1434?
To fix CVE-2017-1434, upgrade to a newer version of IBM DB2 that addresses this vulnerability.
3
Which versions of IBM DB2 are affected by CVE-2017-1434?
CVE-2017-1434 affects IBM DB2 version 11.1.0.0.
4
What type of information does CVE-2017-1434 expose?
CVE-2017-1434 could expose highly sensitive information in the error log to local users.
5
Is this vulnerability present in IBM DB2 Connect Server?
Yes, CVE-2017-1434 also affects the IBM DB2 Connect Server version 11.1.0.0.