Unscored CVE-2009-1239 EUVD-2009-1238GHSA-fcwp-hjrv-px68

IBM DB2 9.1 before FP7 returns incorrect query results in certain situations related to the order of application of an INNER JOIN predicate…

Published Apr 3, 2009 · Updated Aug 7, 2024 · Assigned by mitre

Description

IBM DB2 9.1 before FP7 returns incorrect query results in certain situations related to the order of application of an INNER JOIN predicate and an OUTER JOIN predicate, which might allow attackers to obtain sensitive information via a crafted query.

References

db2-predicate-information-disclosure(49864) vdb-entry
JR31886 vendor-advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21381257
ADV-2009-0912 vdb-entry