VYPR
← All advisories
Unrated severityNVD Advisory· Published Oct 5, 2010· Updated Jun 16, 2026

CVE-2010-3738

CVE-2010-3738

Description

The Security component in IBM DB2 UDB 9.5 before FP6a logs AUDIT events by using a USERID and an AUTHID value corresponding to the instance owner, instead of a USERID and an AUTHID value corresponding to the logged-in user account, which makes it easier for remote authenticated users to execute Audit administration commands without discovery.

Affected products

11
  • IBM/Db210 versions
    cpe:2.3:a:ibm:db2:9.5:*:*:*:*:*:*:*+ 9 more
    • cpe:2.3:a:ibm:db2:9.5:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:db2:9.5:fp1:*:*:*:*:*:*
    • cpe:2.3:a:ibm:db2:9.5:fp2:*:*:*:*:*:*
    • cpe:2.3:a:ibm:db2:9.5:fp2a:*:*:*:*:*:*
    • cpe:2.3:a:ibm:db2:9.5:fp3:*:*:*:*:*:*
    • cpe:2.3:a:ibm:db2:9.5:fp3a:*:*:*:*:*:*
    • cpe:2.3:a:ibm:db2:9.5:fp3b:*:*:*:*:*:*
    • cpe:2.3:a:ibm:db2:9.5:fp4:*:*:*:*:*:*
    • cpe:2.3:a:ibm:db2:9.5:fp4a:*:*:*:*:*:*
    • cpe:2.3:a:ibm:db2:9.5:fp5:*:*:*:*:*:*
  • IBM/DB2 UDBllm-fuzzy
    Range: 9.5 before FP6a

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.