| Package | Affected versions | Patched versions |
|---|---|---|
| db2 universal database | = 9.1 |
The Base Service Utilities component in IBM DB2 9.1 before Fixpak 5 retains a cleartext password in memory after the database connection that sent the password is fully established, which might allow local users to obtain sensitive information by reading a memory dump.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free