VULNERABILITY INTELLIGENCE
CVE-2014-0919
CVSS score4 MEDIUM
EPSS probability1.89%
CISA KEVNot currently listed
Published2015-05-08
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:S/C:P/I:N/A:N
Description
IBM DB2 9.5 through 10.5 on Linux, UNIX, and Windows stores passwords during the processing of certain SQL statements by the monitoring and audit facilities, which allows remote authenticated users to obtain sensitive information via commands associated with these facilities.
Weakness classification
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor