Medium · 5.9 CVE-2021-29825 EUVD-2021-16299GHSA-cj92-pqqm-px4j

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) could disclose sensitive information when using ADMIN_CMD with LOAD or BA…

Published Sep 16, 2021 · Updated Sep 16, 2024 · Assigned by ibm

Vendor: IBM Product: DB2 for Linux, UNIX and Windows Platform: Linux Platform: Windows

Description

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) could disclose sensitive information when using ADMIN_CMD with LOAD or BACKUP. IBM X-Force ID: 204470.

Affected products

Vendor	Product	Affected	Fixed
IBM	DB2 for Linux, UNIX and Windows	11.1, 11.5	—

References

https://www.ibm.com/support/pages/node/6489499
ibm-db2-cve202129825-info-disc (204470) vdb-entry
https://security.netapp.com/advisory/ntap-20211029-0005/