Vulnerability in IBM's DB2 Content Manager and Information Integrator's Single Sign-On Functionality
CVE-2010-1041

Currently unrated

Key Information:

Vendor
IBM
Status
Db2 Content Manager
Vendor
CVE Published:
23 March 2010

Summary

An unspecified vulnerability exists in the single sign-on functionality within the Web Services implementation of IBM's DB2 Content Manager Toolkit and DB2 Information Integrator for Content. This vulnerability could potentially be exploited by remote attackers, allowing them to affect the overall security of affected systems, particularly on platforms like z/OS. The exact impact of this vulnerability remains unclear, necessitating a thorough evaluation and timely updates to version FP13 or later.

References

http://www.osvdb.org/63079
vdb-entryx_refsource_OSVDB
http://www.vupen.com/english/advisories/2010/0656
vdb-entryx_refsource_VUPEN
http://www-01.ibm.com/support/docview.wss?uid=isg1PM03804
vendor-advisoryx_refsource_AIXAPAR

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.