CVE-2008-4693

published 2008-10-22

CVE-2008-4693: The SORT/LIST SERVICES component in IBM DB2 9.1 before FP6 and 9.5 before FP2 writes sensitive information to the trace output, which allows attackers to…

medium 5 CVSS 3.1

AV N AC L Au N C P I N A N

The SORT/LIST SERVICES component in IBM DB2 9.1 before FP6 and 9.5 before FP2 writes sensitive information to the trace output, which allows attackers to obtain sensitive information by reading "PASSWORD-RELATED CONNECTION STRING KEYWORD VALUES."

Affected

4 ranges

Vendor	Product	Version range	Fixed in
ibm	db2	<= 9.1	—
ibm	db2	<= 9.5	—
ibm	db2	—	—
ibm	db2	—	—

CWE-200