Vulnerability Description
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 158092.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ibm | Db2 | 9.7.0.0 |
| Hp | Hp-Ux | - |
| Ibm | Aix | - |
| Linux | Linux Kernel | - |
| Microsoft | Windows | - |
| Oracle | Solaris | - |
Related Weaknesses (CWE)
References
- http://www.securityfocus.com/bid/109026Broken LinkThird Party AdvisoryVDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/158092VDB EntryVendor Advisory
- https://www.ibm.com/support/docview.wss?uid=ibm10880743PatchVendor Advisory
- http://www.securityfocus.com/bid/109026Broken LinkThird Party AdvisoryVDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/158092VDB EntryVendor Advisory
- https://www.ibm.com/support/docview.wss?uid=ibm10880743PatchVendor Advisory
FAQ
What is CVE-2019-4102?
CVE-2019-4102 is a vulnerability with a CVSS score of 5.9 (MEDIUM). IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive ...
How severe is CVE-2019-4102?
CVE-2019-4102 has been rated MEDIUM with a CVSS base score of 5.9/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2019-4102?
Check the references section above for vendor advisories and patch information. Affected products include: Ibm Db2, Hp Hp-Ux, Ibm Aix, Linux Linux Kernel, Microsoft Windows.