IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to an information disclosure due to improper privilege management when certain federation features are used. IBM X-Force ID: 252046.
References
| Link | Resource |
|---|---|
| https://www.ibm.com/support/pages/node/7010573 | Vendor Advisory |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/252046 | VDB Entry Vendor Advisory |
| https://security.netapp.com/advisory/ntap-20230731-0007/ |
Configurations
Configuration 1 (hide)
| AND |
|
History
31 Jul 2023, 19:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
13 Jul 2023, 19:06
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Linux
Linux linux Kernel Microsoft Microsoft windows Oracle solaris Oracle Hp hp-ux Ibm aix Hp Ibm Ibm db2 |
|
| References | (MISC) https://exchange.xforce.ibmcloud.com/vulnerabilities/252046 - VDB Entry, Vendor Advisory | |
| References | (MISC) https://www.ibm.com/support/pages/node/7010573 - Vendor Advisory | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.5 |
| CWE | CWE-269 | |
| CPE | cpe:2.3:o:ibm:aix:-:*:*:*:*:*:*:* cpe:2.3:o:oracle:solaris:-:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* cpe:2.3:a:ibm:db2:10.5.0.11:*:*:*:*:*:*:* cpe:2.3:a:ibm:db2:11.5:*:*:*:*:-:*:* cpe:2.3:a:ibm:db2:11.1.4.7:*:*:*:*:*:*:* cpe:2.3:o:hp:hp-ux:-:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:* |
10 Jul 2023, 16:27
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-07-10 16:15
Updated : 2023-07-31 19:15
NVD link : CVE-2023-29256
Mitre link : CVE-2023-29256
JSON object : View
Products Affected
oracle
- solaris
hp
- hp-ux
ibm
- db2
- aix
linux
- linux_kernel
microsoft
- windows
CWE
CWE-269
Improper Privilege Management