Security Advisory
CVE-2009-3473
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
IBM DB2 9.1 before FP8 does not require the SETSESSIONUSER privilege for the SET SESSION AUTHORIZATION statement, which has unspecified impact and remote attack vectors.