IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 158092.
References
| Link | Resource |
|---|---|
| http://www.securityfocus.com/bid/109026 | Broken Link Third Party Advisory VDB Entry |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/158092 | VDB Entry Vendor Advisory |
| https://www.ibm.com/support/docview.wss?uid=ibm10880743 | Patch Vendor Advisory |
| http://www.securityfocus.com/bid/109026 | Broken Link Third Party Advisory VDB Entry |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/158092 | VDB Entry Vendor Advisory |
| https://www.ibm.com/support/docview.wss?uid=ibm10880743 | Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
No history.
Information
Published : 2019-07-01 15:15
Updated : 2024-11-21 04:43
NVD link : CVE-2019-4102
Mitre link : CVE-2019-4102
CVE.ORG link : CVE-2019-4102
JSON object : View
Products Affected
linux
- linux_kernel
microsoft
- windows
hp
- hp-ux
oracle
- solaris
ibm
- db2
- aix
CWE
CWE-326
Inadequate Encryption Strength