ID CVE-2010-1041
Summary Unspecified vulnerability in the single sign-on functionality in the Web Services implementation in IBM DB2 Content Manager (CM) Toolkit 8.3 before FP13 on z/OS and DB2 Information Integrator for Content 8.3 before FP13 has unknown impact and remote attack vectors.
References
Vulnerable Configurations
  • cpe:2.3:a:ibm:db2_content_manager:8.3:*:*:*:*:*:*:*
    cpe:2.3:a:ibm:db2_content_manager:8.3:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:db2_content_manager:8.3:fp1:*:*:*:*:*:*
    cpe:2.3:a:ibm:db2_content_manager:8.3:fp1:*:*:*:*:*:*
  • cpe:2.3:a:ibm:db2_content_manager:8.3:fp10:*:*:*:*:*:*
    cpe:2.3:a:ibm:db2_content_manager:8.3:fp10:*:*:*:*:*:*
  • cpe:2.3:a:ibm:db2_content_manager:8.3:fp11:*:*:*:*:*:*
    cpe:2.3:a:ibm:db2_content_manager:8.3:fp11:*:*:*:*:*:*
  • cpe:2.3:a:ibm:db2_content_manager:*:fp12:*:*:*:*:*:*
    cpe:2.3:a:ibm:db2_content_manager:*:fp12:*:*:*:*:*:*
  • cpe:2.3:a:ibm:db2_content_manager:8.3:fp2:*:*:*:*:*:*
    cpe:2.3:a:ibm:db2_content_manager:8.3:fp2:*:*:*:*:*:*
  • cpe:2.3:a:ibm:db2_content_manager:8.3:fp3:*:*:*:*:*:*
    cpe:2.3:a:ibm:db2_content_manager:8.3:fp3:*:*:*:*:*:*
  • cpe:2.3:a:ibm:db2_content_manager:8.3:fp3a:*:*:*:*:*:*
    cpe:2.3:a:ibm:db2_content_manager:8.3:fp3a:*:*:*:*:*:*
  • cpe:2.3:a:ibm:db2_content_manager:8.3:fp4:*:*:*:*:*:*
    cpe:2.3:a:ibm:db2_content_manager:8.3:fp4:*:*:*:*:*:*
  • cpe:2.3:a:ibm:db2_content_manager:8.3:fp5:*:*:*:*:*:*
    cpe:2.3:a:ibm:db2_content_manager:8.3:fp5:*:*:*:*:*:*
  • cpe:2.3:a:ibm:db2_content_manager:8.3:fp6:*:*:*:*:*:*
    cpe:2.3:a:ibm:db2_content_manager:8.3:fp6:*:*:*:*:*:*
  • cpe:2.3:a:ibm:db2_content_manager:8.3:fp7:*:*:*:*:*:*
    cpe:2.3:a:ibm:db2_content_manager:8.3:fp7:*:*:*:*:*:*
  • cpe:2.3:a:ibm:db2_content_manager:8.3:fp8:*:*:*:*:*:*
    cpe:2.3:a:ibm:db2_content_manager:8.3:fp8:*:*:*:*:*:*
  • cpe:2.3:a:ibm:db2_content_manager:8.3:fp9:*:*:*:*:*:*
    cpe:2.3:a:ibm:db2_content_manager:8.3:fp9:*:*:*:*:*:*
CVSS
Base: 10.0 (as of 11-06-2010 - 04:00)
Impact:
Exploitability:
CWE NVD-CWE-noinfo
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
COMPLETE COMPLETE COMPLETE
cvss-vector via4 AV:N/AC:L/Au:N/C:C/I:C/A:C
refmap via4
aixapar
  • IO11283
  • PM03804
bid 38833
confirm http://www-01.ibm.com/support/docview.wss?uid=swg27018205&aid=1
osvdb 63079
sectrack 1023726
secunia 39025
vupen ADV-2010-0656
Last major update 11-06-2010 - 04:00
Published 23-03-2010 - 00:53
Last modified 11-06-2010 - 04:00
Back to Top