CVE-2009-1239

{"id": "CVE-2009-1239", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2009-04-03T18:30:00.640", "references": [{"url": "http://www-01.ibm.com/support/docview.wss?uid=swg1JR31886", "tags": ["Patch"], "source": "cve@mitre.org"}, {"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21381257", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2009/0912", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/49864", "source": "cve@mitre.org"}, {"url": "http://www-01.ibm.com/support/docview.wss?uid=swg1JR31886", "tags": ["Patch"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21381257", "tags": ["Patch", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.vupen.com/english/advisories/2009/0912", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/49864", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-200"}]}], "descriptions": [{"lang": "en", "value": "IBM DB2 9.1 before FP7 returns incorrect query results in certain situations related to the order of application of an INNER JOIN predicate and an OUTER JOIN predicate, which might allow attackers to obtain sensitive information via a crafted query."}, {"lang": "es", "value": "IBM DB2 v9.1 anteriores a FP7 devuelve resultados incorrectos en ciertas situaciones relacionadas con la orden de aplicaci\u00f3n de una identificaci\u00f3n INNER JOIN y una identificaci\u00f3n OUTER JOIN, lo que permitir\u00eda a atacantes conseguir informaci\u00f3n sensible a trav\u00e9s de una petici\u00f3n manipulada."}], "lastModified": "2024-11-21T01:01:59.120", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ibm:db2:*:fp6a:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "90C0F24A-7D81-4A4B-8987-FEF3214AFB7E", "versionEndIncluding": "9.1"}, {"criteria": "cpe:2.3:a:ibm:db2:9.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7B28091A-8772-41DC-9D91-D5359CDDA7A9"}, {"criteria": "cpe:2.3:a:ibm:db2:9.1:*:connect_server:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7372EC03-10FD-4A90-801A-B7947436CE34"}, {"criteria": "cpe:2.3:a:ibm:db2:9.1:*:enterprise_server:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "959E00AE-24A2-4890-A120-0EDEC401A2F2"}, {"criteria": "cpe:2.3:a:ibm:db2:9.1:*:express_server:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "66CF4477-2D86-48D6-BD56-E09A01EA518F"}, {"criteria": "cpe:2.3:a:ibm:db2:9.1:*:personal:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CE1F8C8D-DC4C-4401-9D83-BBCF9687035D"}, {"criteria": "cpe:2.3:a:ibm:db2:9.1:*:workgroup_server:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C1C73916-C875-4137-A208-6AE5EEB1A94E"}, {"criteria": "cpe:2.3:a:ibm:db2:9.1:fp1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2AF419E7-F2B5-4E2A-B85D-C0EC6C1DEA4F"}, {"criteria": "cpe:2.3:a:ibm:db2:9.1:fp1:unix:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AB624942-B12A-48B4-88F8-22261CBED995"}, {"criteria": "cpe:2.3:a:ibm:db2:9.1:fp1:windows:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C631A734-423E-4C76-8E1C-A4BB2974DA66"}, {"criteria": "cpe:2.3:a:ibm:db2:9.1:fp2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "95BBA3F1-C276-4C30-BFE5-9CE212BEBEFA"}, {"criteria": "cpe:2.3:a:ibm:db2:9.1:fp3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4DF01163-F805-4FC8-9836-462034D1B5CF"}, {"criteria": "cpe:2.3:a:ibm:db2:9.1:fp3a:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E570E88C-35F8-4E12-8121-20536AC8A0AB"}, {"criteria": "cpe:2.3:a:ibm:db2:9.1:fp4:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "757E30FB-2EFB-4B3D-9931-17D584D433A2"}, {"criteria": "cpe:2.3:a:ibm:db2:9.1:fp4a:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B31F9D02-25FD-4ED1-9D1C-B244BC9426B6"}, {"criteria": "cpe:2.3:a:ibm:db2:9.1:fp5:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "47455B4A-6E10-417F-9974-B0AA7F3180FE"}, {"criteria": "cpe:2.3:a:ibm:db2:9.1:fp6:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "84156C5B-EFC6-4733-A868-C3C51CFBA7CD"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}