IBM DB2 9.1 before FP8 does not require the SETSESSIONUSER privilege for the SET SESSION AUTHORIZATION statement, which has unspecified impact and remote attack vectors.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2009-09-29T21:00:00
Updated: 2024-08-07T06:31:10.372Z
Reserved: 2009-09-29T00:00:00
Link: CVE-2009-3473
Vulnrichment
No data.
NVD
Status : Modified
Published: 2009-09-29T21:30:00.390
Modified: 2024-11-21T01:07:26.923
Link: CVE-2009-3473
Redhat
No data.