CVE-2007-4417

published 2007-08-18

CVE-2007-4417: IBM DB2 UDB 8 before Fixpak 15 and 9.1 before Fixpak 3 does not properly revoke privileges on methods, which allows remote authenticated users to execute a…

medium 6 CVSS 3.1

AV N AC M Au S C P I P A P

IBM DB2 UDB 8 before Fixpak 15 and 9.1 before Fixpak 3 does not properly revoke privileges on methods, which allows remote authenticated users to execute a method after revocation until the routine auth cache is flushed.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
ibm	db2_universal_database	<= 8.0	—
ibm	db2_universal_database	<= 9.1	—