CVE-2019-4102: Weak Encryption

First published: Mon Jul 01 2019(Updated: )

IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 158092.

Credit: psirt@us.ibm.com

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• agent/type
• agent/severity
• agent/references
• agent/weakness
• agent/author
• agent/remedy
• agent/description
• collector/mitre-cve
• source/MITRE
• agent/last-modified-date
• agent/event
• agent/first-publish-date
• agent/source
• agent/softwarecombine
• agent/tags
• collector/nvd-index
• agent/software-canonical-lookup-request
• vendor/ibm
• canonical/ibm db2
• version/ibm db2/9.7.0.0
• version/ibm db2/9.7.0.1
• version/ibm db2/9.7.0.2
• version/ibm db2/9.7.0.3
• version/ibm db2/9.7.0.4
• version/ibm db2/9.7.0.5
• version/ibm db2/9.7.0.6
• version/ibm db2/9.7.0.7
• version/ibm db2/9.7.0.8
• version/ibm db2/9.7.0.9
• version/ibm db2/9.7.0.10
• version/ibm db2/9.7.0.11
• version/ibm db2/10.1.0.0
• version/ibm db2/10.1.0.1
• version/ibm db2/10.1.0.2
• version/ibm db2/10.1.0.3
• version/ibm db2/10.1.0.4
• version/ibm db2/10.1.0.5
• version/ibm db2/10.1.0.6
• version/ibm db2/10.5.0.0
• version/ibm db2/10.5.0.1
• version/ibm db2/10.5.0.2
• version/ibm db2/10.5.0.3
• version/ibm db2/10.5.0.4
• version/ibm db2/10.5.0.5
• version/ibm db2/10.5.0.6
• version/ibm db2/10.5.0.7
• version/ibm db2/10.5.0.8
• version/ibm db2/10.5.0.9
• version/ibm db2/10.5.0.10
• version/ibm db2/11.1.0.0
• version/ibm db2/11.1.1.1
• version/ibm db2/11.1.2.2
• version/ibm db2/11.1.3.3
• version/ibm db2/11.1.4.4
• vendor/hp
• canonical/hpe hp-ux
• canonical/ibm aix
• vendor/linux
• canonical/linux kernel
• vendor/microsoft
• canonical/microsoft windows
• vendor/oracle
• canonical/oracle solaris sparc