CVE-2022-43927
EUVD-2022-4689717.02.2023, 17:15
IBM Db2 for Linux, UNIX and Windows 10.5, 11.1, and 11.5 is vulnerable to information Disclosure due to improper privilege management when a specially crafted table access is used. IBM X-Force ID: 241671.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| ibm | db2 | 10.5 |
| ibm | db2 | 10.5 |
| ibm | db2 | 10.5 |
| ibm | db2 | 11.1 |
| ibm | db2 | 11.1 |
| ibm | db2 | 11.1 |
| ibm | db2 | 11.5 |
| ibm | db2 | 11.5 |
| ibm | db2 | 11.5 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-200 - Exposure of Sensitive Information to an Unauthorized ActorThe product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
- CWE-269 - Improper Privilege ManagementThe software does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.