Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The RAND scalar function in the Common Code Infrastructure component in IBM DB2 9.5 before FP5 and 9.7 before FP1, when the Database Partitioning Feature (DPF) is used, produces "repeating" return values, which might allow attackers to defeat protection mechanisms based on randomization by predicting a value.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
IBM DB2 基础设施组件RAND函数信息泄露漏洞
Vulnerability Description
IBM DB2是美国IBM公司的一套关系型数据库管理系统。该系统的执行环境主要有UNIX、Linux、IBM i、z/OS以及Windows服务器版本。当数据库分期特征被使用时,IBM DB2 FP5以及FP1中的通用基础设施组件的RAND 纯量函数产生"重复"的返回值,远程攻击者可以在预测值的随机选择基础上几百保护机制。
CVSS Information
N/A
Vulnerability Type
N/A