CVE-2022-43927

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-43927
IBM Db2 for Linux, UNIX and Windows 10.5, 11.1, and 11.5 is vulnerable to information Disclosure due to improper privilege management when a specially crafted table access is used. IBM X-Force ID: 241671.

5.9 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.2 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://exchange.xforce.ibmcloud.com/vulnerabilities/241671 VDB Entry Vendor Advisory
https://www.ibm.com/support/pages/node/6953759 Patch Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/241671 VDB Entry Vendor Advisory
https://www.ibm.com/support/pages/node/6953759 Patch Vendor Advisory
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:a:ibm:db2:10.5:*:*:*:*:linux:*:*
cpe:2.3:a:ibm:db2:10.5:*:*:*:*:unix:*:*
cpe:2.3:a:ibm:db2:10.5:*:*:*:*:windows:*:*
cpe:2.3:a:ibm:db2:11.1:*:*:*:*:linux:*:*
cpe:2.3:a:ibm:db2:11.1:*:*:*:*:unix:*:*
cpe:2.3:a:ibm:db2:11.1:*:*:*:*:windows:*:*
cpe:2.3:a:ibm:db2:11.5:*:*:*:*:linux:*:*
cpe:2.3:a:ibm:db2:11.5:*:*:*:*:unix:*:*
cpe:2.3:a:ibm:db2:11.5:*:*:*:*:windows:*:*
OR cpe:2.3:o:hp:hp-ux:-:*:*:*:*:*:*:*
cpe:2.3:o:ibm:aix:-:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
cpe:2.3:o:oracle:solaris:-:*:*:*:*:*:*:*
History

21 Nov 2024, 07:27

Type Values Removed Values Added
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/241671 - VDB Entry, Vendor Advisory () https://exchange.xforce.ibmcloud.com/vulnerabilities/241671 - VDB Entry, Vendor Advisory
References () https://www.ibm.com/support/pages/node/6953759 - Patch, Vendor Advisory () https://www.ibm.com/support/pages/node/6953759 - Patch, Vendor Advisory
Summary
  • (es) IBM Db2 para Linux, UNIX y Windows 10.5, 11.1 y 11.5 es vulnerable a la divulgación de información debido a una gestión inadecuada de privilegios cuando se utiliza un acceso a tablas especialmente manipulado. ID de IBM X-Force: 241671.
CVSS v2 : unknown
v3 : 7.5 		v2 : unknown
v3 : 5.9

27 Jun 2023, 13:33

Type Values Removed Values Added
CWE CWE-200 CWE-269

25 Feb 2023, 03:20

Type Values Removed Values Added
New CVE
Information

Published : 2023-02-17 17:15

Updated : 2024-11-21 07:27

NVD link : CVE-2022-43927

Mitre link : CVE-2022-43927

CVE.ORG link : CVE-2022-43927

JSON object : View

Products Affected

ibm

  • aix
  • db2

hp

  • hp-ux

oracle

  • solaris

microsoft

  • windows

linux

  • linux_kernel
CWE
CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CWE-269

Improper Privilege Management