CVE-2012-0709

IBM DB2 9.5 before FP9, 9.7 through FP5, and 9.8 through FP4 does not properly check variables, which allows remote authenticated users to bypass intended…

published March 20, 2012

CVSS
—
EPSS
2%
Percentile
78.4
In the wild
Unconfirmed
What it is

IBM DB2 9.5 before FP9, 9.7 through FP5, and 9.8 through FP4 does not properly check variables, which allows remote authenticated users to bypass intended restrictions on viewing table data by leveraging the CREATEIN privilege to execute crafted SQL CREATE VARIABLE statements.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01813 · 78.4th percentile
Published
2012-03-20T20:00Z
EPSS history
Timeline
  • 20 MAR 20:00Z
    IBM DB2 9.5 before FP9, 9.7 through FP5, and 9.8 through FP4 does not properly check variables, which allows remote authenticated users to bypass intended…
    cvelistv5