IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 158092.
References
| Link | Resource |
|---|---|
| http://www.securityfocus.com/bid/109026 | Broken Link Third Party Advisory VDB Entry |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/158092 | VDB Entry Vendor Advisory |
| https://www.ibm.com/support/docview.wss?uid=ibm10880743 | Patch Vendor Advisory |
| http://www.securityfocus.com/bid/109026 | Broken Link Third Party Advisory VDB Entry |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/158092 | VDB Entry Vendor Advisory |
| https://www.ibm.com/support/docview.wss?uid=ibm10880743 | Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
No history.
Information
Published : 2019-07-01 15:15
Updated : 2024-11-21 04:43
NVD link : CVE-2019-4102
Mitre link : CVE-2019-4102
CVE.ORG link : CVE-2019-4102
JSON object : View
Products Affected
oracle
- solaris
ibm
- db2
- aix
hp
- hp-ux
linux
- linux_kernel
microsoft
- windows
CWE
CWE-326
Inadequate Encryption Strength