CVE-2008-4693: IBM DB2

Medium severity, CVSS 5.0. EPSS: 1.3% chance of exploitation in the next 30 days.

The SORT/LIST SERVICES component in IBM DB2 9.1 before FP6 and 9.5 before FP2 writes sensitive information to the trace output, which allows attackers to obtain sensitive information by reading "PASSWORD-RELATED CONNECTION STRING KEYWORD VALUES."

Affected products

• IBM DB2: up to and including 9.1; up to and including 9.5; version 9.1 only; version 9.5 only

Published 2008-10-22. Last modified 2026-06-16.