Exposure of sensitive information to an unauthorized actor vulnerability in IBM DB2 - CVE-2018-1685 (Linux)| ID: oval:org.secpod.oval:def:75403 | Date: (C)2021-10-18 (M)2021-09-12 |
| Class: VULNERABILITY | Family: unix |
The host is installed with IBM DB2 9.7 through FP 11, 10.1 through FP6, 10.5 through FP11, 11.1 through 11.1.4FP4 and is prone to an exposure of sensitive information to an unauthorized actor vulnerability. A flaw is present in the application which fails to handle an issue in the db2cacpy. Successful exploitation could allow attackers to access sensitive information.
