Unscored CVE-2014-8910 EUVD-2014-8737GHSA-4p85-v93w-2wpf

IBM DB2 9.7 through FP10, 9.8 through FP5, 10.1 before FP5, and 10.5 through FP5 on Linux, UNIX, and Windows allows remote authenticated us…

Published Jul 20, 2015 · Updated Aug 6, 2024 · Assigned by ibm

Description

IBM DB2 9.7 through FP10, 9.8 through FP5, 10.1 before FP5, and 10.5 through FP5 on Linux, UNIX, and Windows allows remote authenticated users to read arbitrary text files via a crafted XML/XSLT function in a SELECT statement.

References

IT06355 vendor-advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21697988
IT06353 vendor-advisory
75949 vdb-entry
1032883 vdb-entry
IT06354 vendor-advisory
IT06356 vendor-advisory