Skip to content
OpenAdvisories
Medium · 5.3 CVE-2022-22353 EUVD-2022-27499GHSA-3gf5-98hp-9vr6

IBM Big SQL on IBM Cloud Pak for Data 7.1.0, 7.1.1, 7.2.0, and 7.2.3 could allow an authenticated user with appropriate permissions to obta…

Published Mar 14, 2022 · Updated Sep 16, 2024 · Assigned by ibm

Description

IBM Big SQL on IBM Cloud Pak for Data 7.1.0, 7.1.1, 7.2.0, and 7.2.3 could allow an authenticated user with appropriate permissions to obtain sensitive information by bypassing data masking rules using a CREATE TABLE SELECT statement. IBM X-Force ID: 220480.

Affected products

VendorProductAffectedFixed
IBM Big SQL on Cloud Pak for Data 7.1.0, 7.1.1, 7.2.0, 7.2.3 —

References