Lucene search

[email protected]NVD:CVE-2022-22483

HistorySep 13, 2022 - 9:15 p.m.

CVE-2022-22483

2022-09-1321:15:09

CWE-269

[email protected]

web.nvd.nist.gov

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

0.001 Low

EPSS

Percentile

33.3%

JSON

IBM Db2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, 11.1, and 11.5 is vulnerable to an information disclosure in some scenarios due to unauthorized access caused by improper privilege management when CREATE OR REPLACE command is used. IBM X-Force ID: 225979.

Affected configurations

NVD

Node

ibmdb2Match9.7.0.0linux

ibmdb2Match9.7.0.0unix

ibmdb2Match9.7.0.0windows

ibmdb2Match10.1linux

ibmdb2Match10.1unix

ibmdb2Match10.1windows

ibmdb2Match10.5linux

ibmdb2Match10.5unix

ibmdb2Match10.5windows

ibmdb2Match11.1linux

ibmdb2Match11.1unix

ibmdb2Match11.1windows

ibmdb2Match11.5linux

ibmdb2Match11.5unix

ibmdb2Match11.5windows

AND

hphp-uxMatch-

ibmaixMatch-

linuxlinux_kernelMatch-

microsoftwindowsMatch-

oraclesolarisMatch--

References

exchange.xforce.ibmcloud.com/vulnerabilities/225979

security.netapp.com/advisory/ntap-20230921-0004/

www.ibm.com/support/pages/node/6618779

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

0.001 Low

EPSS

Percentile

33.3%

JSON

Related for NVD:CVE-2022-22483

cnvd1 cvelist1 cve1 prion1 ibm2