Lucene search
HistoryJul 10, 2023 - 4:15 p.m.
CVE-2023-23487
ibm
db2
linux
unix
windows
vulnerability
audit logging
x-force id
4.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
6.1 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
23.0%
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1 and 11.5 is vulnerable to insufficient audit logging. IBM X-Force ID: 245918.
Affected configurations
Node
ibmaixMatch-
ORlinuxlinux_kernelMatch-
ORmicrosoftwindowsMatch-
ORoraclesolarisMatch-
ibmdb2Match11.1
ORibmdb2Match11.5
Related
cve
cve
CVE-2023-23487
2023-07-10 16:15:49
prion
prion
Authorization
2023-07-10 16:15:00
cvelist
cvelist
CVE-2023-23487 IBM Db2 audit logging
2023-07-09 23:54:40
4.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
6.1 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
23.0%
Related for NVD:CVE-2023-23487