IBM Db2 for i 7.2, 7.3, 7.4, and 7.5 supplies user defined table function is vulnerable to user enumeration by a local authenticated attacker, without having authority to the related *USRPRF objects. This can be used by a malicious actor to gather information about users that can be targeted in further attacks. IBM X-Force ID: 287174.
References
| Link | Resource |
|---|---|
| https://www.ibm.com/support/pages/node/7157638 | Vendor Advisory |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/287174 | VDB Entry |
Configurations
Configuration 1 (hide)
|
History
01 Aug 2024, 20:37
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:ibm:i:7.3:*:*:*:*:*:*:* cpe:2.3:a:ibm:i:7.4:*:*:*:*:*:*:* cpe:2.3:a:ibm:i:7.2:*:*:*:*:*:*:* cpe:2.3:a:ibm:i:7.5:*:*:*:*:*:*:* |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 3.3 |
| First Time |
Ibm
Ibm i |
|
| CWE | CWE-203 | |
| References | () https://www.ibm.com/support/pages/node/7157638 - Vendor Advisory | |
| References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/287174 - VDB Entry |
15 Jun 2024, 14:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-06-15 14:15
Updated : 2024-08-01 20:37
NVD link : CVE-2024-31870
Mitre link : CVE-2024-31870
JSON object : View
Products Affected
ibm
- i
CWE
CWE-203
Observable Discrepancy