Lucene search
China National Vulnerability DatabaseCNVD-2023-58516HistoryJul 12, 2023 - 12:00 a.m.
IBM DB2 Information Disclosure Vulnerability (CNVD-2023-58516)
2023-07-1200:00:00
China National Vulnerability Database
www.cnvd.org.cn
6
ibm db2
information disclosure
federated functions
privilege management
sensitive information
vulnerability
unix
linux
ibmi
z/os
windows server versions
attacker
0.001 Low
EPSS
Percentile
25.9%
IBM DB2 is a relational database management system from International Business Machines (IBM). The main execution environments for this system are UNIX, Linux, IBMi, z/OS, and Windows server versions. An information disclosure vulnerability exists in IBM DB2 that stems from improper privilege management when using certain federated functions, which can be exploited by an attacker to obtain sensitive information.
| CPE | Name | Operator | Version |
|---|---|---|---|
| ibm db2 10. | eq | 5.0.11 | |
| ibm db2 11. | eq | 1.4.7 |
Related
ibm
ibm
Security Bulletin: IBM® Db2® is vulnerable to information disclosure due to improper privilege management when certain federation features are used. (CVE-2023-29256)
2023-10-03 16:24:41
cvelist
cvelist
CVE-2023-29256 IBM Db2 information disclosure
2023-07-09 23:27:56
cve
cve
CVE-2023-29256
2023-07-10 16:15:50
prion
prion
Information disclosure
2023-07-10 16:15:00
nvd
nvd
CVE-2023-29256
2023-07-10 16:15:50