CVE-2019-4102

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2019-4102
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 158092.

5.9 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.2 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

4.3 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:M/Au:N/C:P/I:N/A:N

Exploitability : 8.6 / Impact : 2.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References
Link Resource
http://www.securityfocus.com/bid/109026 Broken Link Third Party Advisory VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/158092 VDB Entry Vendor Advisory
https://www.ibm.com/support/docview.wss?uid=ibm10880743 Patch Vendor Advisory
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:a:ibm:db2:9.7.0.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:9.7.0.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:9.7.0.2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:9.7.0.3:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:9.7.0.4:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:9.7.0.5:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:9.7.0.6:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:9.7.0.7:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:9.7.0.8:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:9.7.0.9:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:9.7.0.10:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:9.7.0.11:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:10.1.0.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:10.1.0.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:10.1.0.2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:10.1.0.3:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:10.1.0.4:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:10.1.0.5:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:10.1.0.6:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:10.5.0.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:10.5.0.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:10.5.0.2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:10.5.0.3:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:10.5.0.4:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:10.5.0.5:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:10.5.0.6:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:10.5.0.7:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:10.5.0.8:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:10.5.0.9:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:10.5.0.10:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:11.1.0.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:11.1.1.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:11.1.2.2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:11.1.3.3:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:11.1.4.4:*:*:*:*:*:*:*
OR cpe:2.3:o:hp:hp-ux:-:*:*:*:*:*:*:*
cpe:2.3:o:ibm:aix:-:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
cpe:2.3:o:oracle:solaris:-:*:*:*:*:*:-:*
History

03 Mar 2023, 20:50

Type Values Removed Values Added
References (CONFIRM) https://www.ibm.com/support/docview.wss?uid=ibm10880743 - Vendor Advisory (CONFIRM) https://www.ibm.com/support/docview.wss?uid=ibm10880743 - Patch, Vendor Advisory
References (BID) http://www.securityfocus.com/bid/109026 - (BID) http://www.securityfocus.com/bid/109026 - Broken Link, Third Party Advisory, VDB Entry
First Time Oracle solaris
Hp hp-ux
Ibm aix
Oracle
Hp
CPE cpe:2.3:o:ibm:aix:-:*:*:*:*:*:*:*
cpe:2.3:o:oracle:solaris:-:*:*:*:*:*:-:*
cpe:2.3:o:hp:hp-ux:-:*:*:*:*:*:*:*
Information

Published : 2019-07-01 15:15

Updated : 2023-12-10 12:59

NVD link : CVE-2019-4102

Mitre link : CVE-2019-4102

CVE.ORG link : CVE-2019-4102

JSON object : View

Products Affected

oracle

  • solaris

ibm

  • aix
  • db2

microsoft

  • windows

hp

  • hp-ux

linux

  • linux_kernel
CWE
CWE-326

Inadequate Encryption Strength