IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1 stores potentially sensitive information in log files that could be read by a local user. IBM X-Force ID: 281677.
Weakness
The product writes sensitive information to a log file.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Db2 | Ibm | 11.1 (including) | 11.1 (including) |
Potential Mitigations
Related Attack Patterns
References
- https://https://exchange.xforce.ibmcloud.com/vulnerabilities/281677
- https://security.netapp.com/advisory/ntap-20240517-0006/
- https://www.ibm.com/support/pages/node/7145725
- https://https://exchange.xforce.ibmcloud.com/vulnerabilities/281677
- https://security.netapp.com/advisory/ntap-20240517-0006/
- https://www.ibm.com/support/pages/node/7145725