CVE-2009-4150

CWE-2643 documents3 sources
Severity
4.6MEDIUM
EPSS
0.1%
top 66.95%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
IBM DB2IBM DB2 Universal Database
Timeline
PublishedDec 2
Latest updateMay 2

Description

dasauto in IBM DB2 8 before FP18, 9.1 before FP8, 9.5 before FP4, and 9.7 before FP1 permits execution by unprivileged user accounts, which has unspecified impact and local attack vectors.

CVSS vector

AV:L/AC:L/C:P/I:P/A:PExploitability: 3.9 | Impact: 6.4

Affected Packages2 packages

▶NVDibm/db29.1, 9.5, 9.7+2

Patches

Patch: www-01.ibm.com ↗Patch: www-01.ibm.com ↗Patch: www-01.ibm.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-g53c-pmxx-v6h7: dasauto in IBM DB2 8 before FP18, 9↗2022-05-02
▶
CVEList
CVE-2009-4150: dasauto in IBM DB2 8 before FP18, 9↗2009-12-02
▶
CVE-2009-4150 (MEDIUM CVSS 4.6) | dasauto in IBM DB2 8 before FP18 | cvebase.io