IbmCVELIST:CVE-2022-22483CVE-2022-22483
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
AI Score
Confidence
High
EPSS
Percentile
33.1%
IBM Db2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, 11.1, and 11.5 is vulnerable to an information disclosure in some scenarios due to unauthorized access caused by improper privilege management when CREATE OR REPLACE command is used. IBM X-Force ID: 225979.
CNA Affected
[
{
"vendor": "IBM",
"product": "DB2 for Linux, UNIX and Windows",
"versions": [
{
"version": "10.5",
"status": "affected"
},
{
"version": "10.1",
"status": "affected"
},
{
"version": "9.7",
"status": "affected"
},
{
"version": "11.1",
"status": "affected"
},
{
"version": "11.5",
"status": "affected"
}
]
}
]Related
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
AI Score
Confidence
High
EPSS
Percentile
33.1%