製品・ソフトウェアに関する情報

JVN脆弱性詳細

IBM DB2 CM Toolkit などの製品で使用されるシングルサインオン機能における脆弱性

Title	IBM DB2 CM Toolkit などの製品で使用されるシングルサインオン機能における脆弱性
Summary	IBM DB2 Content Manager (CM) Toolkit および DB2 Information Integrator for Content の Web Services 実装のシングルサインオン機能には、不特定の影響を受ける脆弱性が存在します。
Possible impacts	不特定の影響を受ける可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	March 22, 2010, midnight
Registration Date	Sept. 25, 2012, 5:38 p.m.
Last Update	Sept. 25, 2012, 5:38 p.m.

Affected System

IBM

db2 content manager FP13 未満の Toolkit 8.3

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2010-1041	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1041
National Vulnerability Database (NVD)
2	CVE-2010-1041	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2010-1041

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-noinfo	https://www.ipa.go.jp/security/vuln/CWE.html#CWEnoinfo

ベンダー情報

No	Name	URL
IBM
1	PM03804	http://www-01.ibm.com/support/docview.wss?uid=isg1PM03804

Change Log

No	Changed Details	Date of change
0	[2012年09月25日] 掲載	Feb. 17, 2018, 10:37 a.m.

NVD Vulnerability Information

CVE-2010-1041

Summary	Unspecified vulnerability in the single sign-on functionality in the Web Services implementation in IBM DB2 Content Manager (CM) Toolkit 8.3 before FP13 on z/OS and DB2 Information Integrator for Content 8.3 before FP13 has unknown impact and remote attack vectors.
Publication Date	March 23, 2010, 9:53 a.m.
Registration Date	Jan. 29, 2021, 10:58 a.m.
Last Update	June 11, 2010, 1 p.m.

Affected software configurations

Configuration1	or higher	or less	more than	less than
cpe:2.3:a:ibm:db2_content_manager:8.3:::::::*
cpe:2.3:a:ibm:db2_content_manager:8.3:fp1::::::
cpe:2.3:a:ibm:db2_content_manager:8.3:fp10::::::
cpe:2.3:a:ibm:db2_content_manager:8.3:fp11::::::
cpe:2.3:a:ibm:db2_content_manager::fp12::::::*		8.3
cpe:2.3:a:ibm:db2_content_manager:8.3:fp2::::::
cpe:2.3:a:ibm:db2_content_manager:8.3:fp3::::::
cpe:2.3:a:ibm:db2_content_manager:8.3:fp3a::::::
cpe:2.3:a:ibm:db2_content_manager:8.3:fp4::::::
cpe:2.3:a:ibm:db2_content_manager:8.3:fp5::::::
cpe:2.3:a:ibm:db2_content_manager:8.3:fp6::::::
cpe:2.3:a:ibm:db2_content_manager:8.3:fp7::::::
cpe:2.3:a:ibm:db2_content_manager:8.3:fp8::::::
cpe:2.3:a:ibm:db2_content_manager:8.3:fp9::::::

Related information, measures and tools

No	URL	refsource	タグ
1	http://secunia.com/advisories/39025	SECUNIA	Vendor Advisory
2	http://securitytracker.com/id?1023726	SECTRACK
3	http://www.osvdb.org/63079	OSVDB
4	http://www.securityfocus.com/bid/38833	BID
5	http://www.vupen.com/english/advisories/2010/0656	VUPEN	Vendor Advisory
6	http://www-01.ibm.com/support/docview.wss?uid=isg1PM03804	AIXAPAR	Patch
7	http://www-01.ibm.com/support/docview.wss?uid=swg1IO11283	AIXAPAR
8	http://www-01.ibm.com/support/docview.wss?uid=swg27018205&aid=1	CONFIRM

Common Vulnerabilities List

Configuration1	or higher	or less	more than	less than
cpe:2.3:a:ibm:db2_content_manager:8.3:::::::*
cpe:2.3:a:ibm:db2_content_manager:8.3:fp1::::::
cpe:2.3:a:ibm:db2_content_manager:8.3:fp10::::::
cpe:2.3:a:ibm:db2_content_manager:8.3:fp11::::::
cpe:2.3:a:ibm:db2_content_manager::fp12::::::*		8.3
cpe:2.3:a:ibm:db2_content_manager:8.3:fp2::::::
cpe:2.3:a:ibm:db2_content_manager:8.3:fp3::::::
cpe:2.3:a:ibm:db2_content_manager:8.3:fp3a::::::
cpe:2.3:a:ibm:db2_content_manager:8.3:fp4::::::
cpe:2.3:a:ibm:db2_content_manager:8.3:fp5::::::
cpe:2.3:a:ibm:db2_content_manager:8.3:fp6::::::
cpe:2.3:a:ibm:db2_content_manager:8.3:fp7::::::
cpe:2.3:a:ibm:db2_content_manager:8.3:fp8::::::
cpe:2.3:a:ibm:db2_content_manager:8.3:fp9::::::