CVE-2019-4102
Summary
| CVE | CVE-2019-4102 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2019-07-01 15:15:00 UTC |
| Updated | 2023-03-03 20:50:00 UTC |
| Description | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 158092. |
Risk And Classification
Problem Types: CWE-326
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Hp | Hp-ux | - | All | All | All |
| Operating System | Ibm | Aix | - | All | All | All |
| Application | Ibm | Db2 | 10.1.0.0 | All | All | All |
| Application | Ibm | Db2 | 10.1.0.1 | All | All | All |
| Application | Ibm | Db2 | 10.1.0.2 | All | All | All |
| Application | Ibm | Db2 | 10.1.0.3 | All | All | All |
| Application | Ibm | Db2 | 10.1.0.4 | All | All | All |
| Application | Ibm | Db2 | 10.1.0.5 | All | All | All |
| Application | Ibm | Db2 | 10.1.0.6 | All | All | All |
| Application | Ibm | Db2 | 10.5.0.0 | All | All | All |
| Application | Ibm | Db2 | 10.5.0.1 | All | All | All |
| Application | Ibm | Db2 | 10.5.0.10 | All | All | All |
| Application | Ibm | Db2 | 10.5.0.2 | All | All | All |
| Application | Ibm | Db2 | 10.5.0.3 | All | All | All |
| Application | Ibm | Db2 | 10.5.0.4 | All | All | All |
| Application | Ibm | Db2 | 10.5.0.5 | All | All | All |
| Application | Ibm | Db2 | 10.5.0.6 | All | All | All |
| Application | Ibm | Db2 | 10.5.0.7 | All | All | All |
| Application | Ibm | Db2 | 10.5.0.8 | All | All | All |
| Application | Ibm | Db2 | 10.5.0.9 | All | All | All |
| Application | Ibm | Db2 | 11.1.0.0 | All | All | All |
| Application | Ibm | Db2 | 11.1.1.1 | All | All | All |
| Application | Ibm | Db2 | 11.1.2.2 | All | All | All |
| Application | Ibm | Db2 | 11.1.3.3 | All | All | All |
| Application | Ibm | Db2 | 11.1.4.4 | All | All | All |
| Application | Ibm | Db2 | 9.7.0.0 | All | All | All |
| Application | Ibm | Db2 | 9.7.0.1 | All | All | All |
| Application | Ibm | Db2 | 9.7.0.10 | All | All | All |
| Application | Ibm | Db2 | 9.7.0.11 | All | All | All |
| Application | Ibm | Db2 | 9.7.0.2 | All | All | All |
| Application | Ibm | Db2 | 9.7.0.3 | All | All | All |
| Application | Ibm | Db2 | 9.7.0.4 | All | All | All |
| Application | Ibm | Db2 | 9.7.0.5 | All | All | All |
| Application | Ibm | Db2 | 9.7.0.6 | All | All | All |
| Application | Ibm | Db2 | 9.7.0.7 | All | All | All |
| Application | Ibm | Db2 | 9.7.0.8 | All | All | All |
| Application | Ibm | Db2 | 9.7.0.9 | All | All | All |
| Application | Ibm | Db2 | 10.1.0.0 | All | All | All |
| Application | Ibm | Db2 | 10.1.0.1 | All | All | All |
| Application | Ibm | Db2 | 10.1.0.2 | All | All | All |
| Application | Ibm | Db2 | 10.1.0.3 | All | All | All |
| Application | Ibm | Db2 | 10.1.0.4 | All | All | All |
| Application | Ibm | Db2 | 10.1.0.5 | All | All | All |
| Application | Ibm | Db2 | 10.1.0.6 | All | All | All |
| Application | Ibm | Db2 | 10.5.0.0 | All | All | All |
| Application | Ibm | Db2 | 10.5.0.1 | All | All | All |
| Application | Ibm | Db2 | 10.5.0.10 | All | All | All |
| Application | Ibm | Db2 | 10.5.0.2 | All | All | All |
| Application | Ibm | Db2 | 10.5.0.3 | All | All | All |
| Application | Ibm | Db2 | 10.5.0.4 | All | All | All |
| Application | Ibm | Db2 | 10.5.0.5 | All | All | All |
| Application | Ibm | Db2 | 10.5.0.6 | All | All | All |
| Application | Ibm | Db2 | 10.5.0.7 | All | All | All |
| Application | Ibm | Db2 | 10.5.0.8 | All | All | All |
| Application | Ibm | Db2 | 10.5.0.9 | All | All | All |
| Application | Ibm | Db2 | 11.1.0.0 | All | All | All |
| Application | Ibm | Db2 | 11.1.1.1 | All | All | All |
| Application | Ibm | Db2 | 11.1.2.2 | All | All | All |
| Application | Ibm | Db2 | 11.1.3.3 | All | All | All |
| Application | Ibm | Db2 | 11.1.4.4 | All | All | All |
| Application | Ibm | Db2 | 9.7.0.0 | All | All | All |
| Application | Ibm | Db2 | 9.7.0.1 | All | All | All |
| Application | Ibm | Db2 | 9.7.0.10 | All | All | All |
| Application | Ibm | Db2 | 9.7.0.11 | All | All | All |
| Application | Ibm | Db2 | 9.7.0.2 | All | All | All |
| Application | Ibm | Db2 | 9.7.0.3 | All | All | All |
| Application | Ibm | Db2 | 9.7.0.4 | All | All | All |
| Application | Ibm | Db2 | 9.7.0.5 | All | All | All |
| Application | Ibm | Db2 | 9.7.0.6 | All | All | All |
| Application | Ibm | Db2 | 9.7.0.7 | All | All | All |
| Application | Ibm | Db2 | 9.7.0.8 | All | All | All |
| Application | Ibm | Db2 | 9.7.0.9 | All | All | All |
| Operating System | Linux | Linux Kernel | - | All | All | All |
| Operating System | Linux | Linux Kernel | - | All | All | All |
| Operating System | Microsoft | Windows | - | All | All | All |
| Operating System | Microsoft | Windows | - | All | All | All |
| Operating System | Oracle | Solaris | - | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| IBM X-Force Exchange | XF | exchange.xforce.ibmcloud.com | VDB Entry, Vendor Advisory |
| Security Bulletin: IBM® Db2® does not explicitly forbid a weaker than expected 3DES cipher when configured to use SSL (CVE-2019-4102). | CONFIRM | www.ibm.com | Vendor Advisory |
| IBM DB2 CVE-2019-4102 Information Disclosure Vulnerability | BID | www.securityfocus.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.