CVE-2023-42005

IBM Db2 on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data 3.5, 4.0, 4.5, 4.6, 4.7, and 4.8 could allow a user with access to the Kubernetes pod, to make system calls compromising the security of containers. IBM X-Force ID: 265264.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.4 HIGH
LOCAL
HIGH
NONE
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
ibmCNA
7.4 HIGH
LOCAL
HIGH
NONE
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA-ADPADP
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 26%
VendorProductVersion
ibmdb2
3.5
ibmdb2
3.5:refresh_10
ibmdb2
4.0
ibmdb2
4.0:refresh_9
ibmdb2
4.5
ibmdb2
4.5:refresh_3
ibmdb2
4.6
ibmdb2
4.6:refresh_6
ibmdb2
4.7
ibmdb2
4.7:refresh_4
ibmdb2
4.8
ibmdb2
4.8:refresh_4
ibmdb2_warehouse
3.5
ibmdb2_warehouse
3.5:refresh_10
ibmdb2_warehouse
4.0
ibmdb2_warehouse
4.0:refresh_9
ibmdb2_warehouse
4.5
ibmdb2_warehouse
4.5:refresh_3
ibmdb2_warehouse
4.6
ibmdb2_warehouse
4.6:refresh_6
ibmdb2_warehouse
4.7
ibmdb2_warehouse
4.7:refresh_4
ibmdb2_warehouse
4.8
ibmdb2_warehouse
4.8:refresh_4
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://exchange.xforce.ibmcloud.com/vulnerabilities/265264
https://www.ibm.com/support/pages/node/7155078
https://exchange.xforce.ibmcloud.com/vulnerabilities/265264
https://www.ibm.com/support/pages/node/7155078