CVE-2019-4102: Weak Encryption
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 158092.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2019-4102?
CVE-2019-4102 is classified as high severity due to its potential to allow attackers to decrypt sensitive information.
How do I fix CVE-2019-4102?
To fix CVE-2019-4102, upgrade to a version of IBM DB2 that uses stronger cryptographic algorithms as recommended in the IBM security advisory.
What versions of IBM DB2 are affected by CVE-2019-4102?
IBM DB2 versions 9.7, 10.1, 10.5, and 11.0 are affected by CVE-2019-4102.
Can CVE-2019-4102 be exploited remotely?
Yes, CVE-2019-4102 can potentially be exploited remotely, allowing unauthorized access to sensitive data.
What types of data are at risk due to CVE-2019-4102?
CVE-2019-4102 puts highly sensitive information at risk due to its use of weaker than expected cryptographic algorithms.