Skip to content
OpenAdvisories
Medium · 6.5 CVE-2021-38931 EUVD-2021-25368GHSA-ccc8-q55j-mm8v

IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.1, and 11.5 is vulnerable to an information disclosure as a result of …

Published Dec 9, 2021 · Updated Sep 17, 2024 · Assigned by ibm

Description

IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.1, and 11.5 is vulnerable to an information disclosure as a result of a connected user having indirect read access to a table where they are not authorized to select from. IBM X-Force ID: 210418.

Affected products

VendorProductAffectedFixed
IBM DB2 for Linux, UNIX and Windows 11.1, 11.5 —

Advisories 1

References