CVE-2026-18097
EUVD-2026-5761912.08.2026, 21:17
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow a local attacker to obtain sensitive information due to the logging of plain text passwords in trace files.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| ibm | db2 | 11.5.0 ≤ 𝑥 ≤ 11.5.9 |
| ibm | db2 | 11.5.0 ≤ 𝑥 ≤ 11.5.9 |
| ibm | db2 | 11.5.0 ≤ 𝑥 ≤ 11.5.9 |
| ibm | db2 | 12.1.0 ≤ 𝑥 ≤ 12.1.5 |
| ibm | db2 | 12.1.0 ≤ 𝑥 ≤ 12.1.5 |
| ibm | db2 | 12.1.0 ≤ 𝑥 ≤ 12.1.5 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration