Medium · 5.9 CVE-2022-43927 EUVD-2022-46897GHSA-h346-g45r-r5rw

IBM Db2 for Linux, UNIX and Windows information disclosure

Published Feb 17, 2023 · Updated Mar 18, 2025 · Assigned by ibm

Vendor: IBM Product: DB2 for Linux, UNIX and Windows Platform: Linux Platform: Windows

Description

IBM Db2 for Linux, UNIX and Windows 10.5, 11.1, and 11.5 is vulnerable to information Disclosure due to improper privilege management when a specially crafted table access is used. IBM X-Force ID: 241671.

Affected products

Vendor	Product	Affected	Fixed
IBM	Db2 for Linux, UNIX and Windows	10.5, 11.1 ,11.5	—

Advisories 1

WID-SEC-2023-0309 IBM DB2: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jan 5, 2025

References

https://www.ibm.com/support/pages/node/6953759 vendor-advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/241671 vdb-entry