Medium · 6.3 CVE-2025-27898 EUVD-2025-207714GHSA-5xwj-82gw-46fv

Multiple vulnerabilities in IBM Java SDK affecting Db2 Recovery Expert for Linux, Unix and Windows

Published Feb 17, 2026 · Updated Mar 6, 2026 · Assigned by ibm

Vendor: IBM Product: DB2 Recovery Expert for LUW

Description

IBM DB2 Recovery Expert for LUW 5.5 Interim Fix 002 does not invalidate session after a timeout which could allow an authenticated user to impersonate another user on the system.

Affected products

Vendor	Product	Affected	Fixed
IBM	DB2 Recovery Expert for LUW	5.5 Interim Fix 002	—

References

https://www.ibm.com/support/pages/node/7259901 vendor-advisory patch