CVE-2010-3738

published 2010-10-05

CVE-2010-3738: The Security component in IBM DB2 UDB 9.5 before FP6a logs AUDIT events by using a USERID and an AUTHID value corresponding to the instance owner, instead of a…

medium 5 CVSS 3.1

AV N AC L Au N C N I P A N

The Security component in IBM DB2 UDB 9.5 before FP6a logs AUDIT events by using a USERID and an AUTHID value corresponding to the instance owner, instead of a USERID and an AUTHID value corresponding to the logged-in user account, which makes it easier for remote authenticated users to execute Audit administration commands without discovery.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
ibm	db2	—	—

CWE-264