Description
IBM DB2 9.7 before FP2 does not perform the expected access control on the monitor administrative views in the SYSIBMADM schema, which allows remote attackers to obtain sensitive information via unspecified vectors.
References
- oval:org.mitre.oval:def:14430 vdb-entry signature
- IC67819 vendor-advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21432298