← Back

CVE-2009-3473

nvd nist
Published: Sep 29, 2009Modified: Apr 23, 2026

JSON object

Loading...
10.0
Vector
AV:N/AC:L/Au:N/C:C/I:C/A:C
Exploitability: 10.0 / Impact: 10.0
Source: NVD

Description

IBM DB2 9.1 before FP8 does not require the SETSESSIONUSER privilege for the SET SESSION AUTHORIZATION statement, which has unspecified impact and remote attack vectors.

Affected (7)

Products: Ibm: Db2
Ibm
1 product
Db2
Configuration A
7 vulnerable
Vulnerable SoftwareAffected Versions
Ibm
Db2
Version 9.1 fp1
Db2
Version 9.1 fp2
Db2
Version 9.1 fp3
Db2
Version 9.1 fp4
Db2
Version 9.1 fp5
Db2
Version 9.1 fp6
Db2
Version 9.1 fp7

References (10)

Source: cve@mitre.org
Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.