← Back

CVE-2009-1239

nvd nist
Published: Apr 3, 2009Modified: Apr 23, 2026

JSON object

Loading...
5.0
Vector
AV:N/AC:L/Au:N/C:P/I:N/A:N
Exploitability: 10.0 / Impact: 2.9
Source: NVD

Description

IBM DB2 9.1 before FP7 returns incorrect query results in certain situations related to the order of application of an INNER JOIN predicate and an OUTER JOIN predicate, which might allow attackers to obtain sensitive information via a crafted query.

Affected (17)

Products: Ibm: Db2
Ibm
1 product
Db2
Configuration A
17 vulnerable
Vulnerable SoftwareAffected Versions
Ibm
Db2
Up to 9.1
Db2
Version 9.1
Db2
Version 9.1
Db2
Version 9.1
Db2
Version 9.1
Db2
Version 9.1
Db2
Version 9.1
Db2
Version 9.1 fp1
Db2
Version 9.1 fp1
Db2
Version 9.1 fp1
Db2
Version 9.1 fp2
Db2
Version 9.1 fp3
Db2
Version 9.1 fp3a
Db2
Version 9.1 fp4
Db2
Version 9.1 fp4a
Db2
Version 9.1 fp5
Db2
Version 9.1 fp6

Related CWEs

CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (8)

Source: cve@mitre.org
Patch
Source: cve@mitre.org
PatchVendor Advisory
Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.