CVE-2009-1239

IBM DB2 9.1 before FP7 returns incorrect query results in certain situations related to the order of application of an INNER JOIN predicate and an OUTER JOIN predicate, which might allow attackers to obtain sensitive information via a crafted query.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:N/A:N
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 52%
VendorProductVersion
ibmdb2
𝑥
≤ 9.1
ibmdb2
9.1
ibmdb2
9.1
ibmdb2
9.1
ibmdb2
9.1
ibmdb2
9.1
ibmdb2
9.1
ibmdb2
9.1:fp1
ibmdb2
9.1:fp1
ibmdb2
9.1:fp1
ibmdb2
9.1:fp2
ibmdb2
9.1:fp3
ibmdb2
9.1:fp3a
ibmdb2
9.1:fp4
ibmdb2
9.1:fp4a
ibmdb2
9.1:fp5
ibmdb2
9.1:fp6
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www-01.ibm.com/support/docview.wss?uid=swg1JR31886
http://www-01.ibm.com/support/docview.wss?uid=swg21381257
http://www.vupen.com/english/advisories/2009/0912
https://exchange.xforce.ibmcloud.com/vulnerabilities/49864
http://www-01.ibm.com/support/docview.wss?uid=swg1JR31886
http://www-01.ibm.com/support/docview.wss?uid=swg21381257
http://www.vupen.com/english/advisories/2009/0912
https://exchange.xforce.ibmcloud.com/vulnerabilities/49864