Medium · 6.2 CVE-2022-43930 EUVD-2022-46900GHSA-xc88-8xhr-v9x4

IBM Db2 for Linux, UNIX and Windows information disclosure

Published Feb 17, 2023 · Updated Mar 12, 2025 · Assigned by ibm

Vendor: IBM Product: DB2 for Linux, UNIX and Windows Platform: Linux Platform: Windows

Description

IBM Db2 for Linux, UNIX and Windows 10.5, 11.1, and 11.5 is vulnerable to an Information Disclosure as sensitive information may be included in a log file. IBM X-Force ID: 241677.

Affected products

Vendor	Product	Affected	Fixed
IBM	Db2 for Linux, UNIX and Windows	10.5, 11.1, 11.5	—

Advisories 1

WID-SEC-2023-0309 IBM DB2: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jan 5, 2025

References

https://www.ibm.com/support/pages/node/6953755 vendor-advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/241677 vdb-entry