CVE-2009-1905
ibm db2: no CVSS score yet. EPSS 1.8% chance of exploitation in the next 30 days.
The Common Code Infrastructure component in IBM DB2 8 before FP17, 9.1 before FP7, and 9.5 before FP4, when LDAP security (aka IBMLDAPauthserver) and anonymous bind are enabled, allows remote attackers to bypass password authentication and establish a database connection via unspecified vectors.
- EPSS
- 1.8% chance of exploitation in the next 30 days; higher than 79% of CVEs (scores of 2026-11-01)
- CWE
- CWE-287
- Published
- Modified
- Record from
- the NVD, synced
Affected
- ibm:db2