CVE Vulnerability

CVE-2019-4102

IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 158092.

4.3 /10

CVSS v2.0 :

V3 Legend

Vector :

Exploitability : 8.6 / Impact : 2.9

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

Scope

5.9 /10

CVSS v3.0 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.2 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://www.ibm.com/support/docview.wss?uid=ibm10880743 Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/158092 VDB Entry Vendor Advisory
http://www.securityfocus.com/bid/109026
Configurations

Configuration 1
Information

Published : 2019-07-01 03:15

Updated : 2019-07-04 02:15

NVD link : CVE-2019-4102

Mitre link : CVE-2019-4102

Products Affected

Oracle

Solaris

CWE
CWE-326

Inadequate Encryption Strength