CVE-2009-3473

published 2009-09-29

CVE-2009-3473: IBM DB2 9.1 before FP8 does not require the SETSESSIONUSER privilege for the SET SESSION AUTHORIZATION statement, which has unspecified impact and remote…

critical 10 CVSS 3.1

AV N AC L Au N C C I C A C

IBM DB2 9.1 before FP8 does not require the SETSESSIONUSER privilege for the SET SESSION AUTHORIZATION statement, which has unspecified impact and remote attack vectors.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
ibm	db2	—	—