CVE-2017-1434
published 2017-09-12CVE-2017-1434: IBM DB2 for Linux, UNIX and Windows 11.1 (includes DB2 Connect Server) under unusual circumstances, could expose highly sensitive information in the error log…
PriorityP416medium4.7CVSS 3.0
AVLACHPRLUINSUCHINAN
EPSS
0.34%
25.7th percentile
IBM DB2 for Linux, UNIX and Windows 11.1 (includes DB2 Connect Server) under unusual circumstances, could expose highly sensitive information in the error log to a local user.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| ibm | db2 | — | — |
| ibm | db2_connect | — | — |
CVSS provenance
nvdv3.04.7MEDIUMCVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
nvdv2.02.1LOWAV:L/AC:L/Au:N/C:P/I:N/A:N
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://www.ibm.com/support/docview.wss?uid=swg22005740http://www.securityfocus.com/bid/100693http://www.securitytracker.com/id/1039297https://exchange.xforce.ibmcloud.com/vulnerabilities/127806http://www.ibm.com/support/docview.wss?uid=swg22005740http://www.securityfocus.com/bid/100693http://www.securitytracker.com/id/1039297https://exchange.xforce.ibmcloud.com/vulnerabilities/127806
2017-09-12
Published