Medium · 4.4 CVE-2021-29752 EUVD-2021-16226GHSA-xjhh-xcpq-fjx4

IBM Db2 11.2 and 11.5 contains an information disclosure vulnerability, exposing remote storage credentials to privileged users under speci…

Published Sep 16, 2021 · Updated Sep 17, 2024 · Assigned by ibm

Vendor: IBM Product: DB2 for Linux, UNIX and Windows Platform: Linux Platform: Windows

Description

IBM Db2 11.2 and 11.5 contains an information disclosure vulnerability, exposing remote storage credentials to privileged users under specific conditions. IBM X-Fporce ID: 201780.

Affected products

Vendor	Product	Affected	Fixed
IBM	DB2 for Linux, UNIX and Windows	11.1, 11.5	—

References

https://www.ibm.com/support/pages/node/6489489
ibm-db2-cve202129752-info-disc (201780) vdb-entry
https://security.netapp.com/advisory/ntap-20220526-0003/