CVE-2010-3475

IBM DB2 9.7 before FP3 does not properly enforce privilege requirements for execution of entries in the dynamic SQL cache, which allows remote authenticated…

published September 20, 2010

CVSS
—
EPSS
3%
Percentile
86.6
In the wild
Unconfirmed
What it is

IBM DB2 9.7 before FP3 does not properly enforce privilege requirements for execution of entries in the dynamic SQL cache, which allows remote authenticated users to bypass intended access restrictions by leveraging the cache to execute an UPDATE statement contained in a compiled compound SQL statement.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02839 · 86.6th percentile
Published
2010-09-20T21:00Z
EPSS history
Timeline
  • 20 SEP 21:00Z
    IBM DB2 9.7 before FP3 does not properly enforce privilege requirements for execution of entries in the dynamic SQL cache, which allows remote authenticated…
    cvelistv5