PT-2023-6697 · Ibm · Ibm Db2

🗓️ 24 Apr 2023 00:00:00Reported by Positive TechnologiesType

ptsecurity

ptsecurity🔗 dbugs.ptsecurity.com👁 1 Views

Insufficient access control in IBM Db2 may allow remote code execution by a database administrator.

Reporter	Title	Published	Views	Family All 29
IBM Security Bulletins	Security Bulletin: IBM DB2 used by IBM Security Verify Governance, Identity Manager virtual appliance component has multiple vulnerabilities	30 Jun 202306:43	–	ibm
IBM Security Bulletins	Security Bulletin: IBM DB2 used by IBM Security Verify Governance has multiple vulnerabilities	10 Jan 202404:23	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in IBM DB2 affects IBM Application Performance Management products.	13 Sep 202307:50	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities have been identified in IBM Db2 shipped with IBM Security Guardium Key Lifecycle Manager (CVE-2023-27559, CVE-2023-26022, CVE-2023-25930, CVE-2023-26021, CVE-2023-27555, CVE-2023-29255, CVE-2023-29257)	18 May 202307:02	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM DB2 affect IBM Operations Analytics Predictive Insights	12 Jun 202312:59	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Partner Engagement Manager is vulnerable to multiple issues due to IBM Db2	6 Jun 202315:24	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for May 2023	26 Jun 202316:40	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Virtualization Engine TS7700 is susceptible to multiple vulnerabilities due to the use of IBM Db2	6 May 202422:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM® Db2® is vulnerable to remote code execution as a database administrator of one database may execute code or read/write files from another database within the same instance. (CVE-2023-29257)	24 Apr 202321:44	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Db2® Warehouse has released a fix in response to multiple vulnerabilities found in IBM Db2®	20 Jun 202314:46	–	ibm

Source	Link
bdu	www.bdu.fstec.ru/vul/2023-07467
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/252011
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-29257
ibm	www.ibm.com/support/pages/node/6985691
t	www.t.me/cvenotify/49106
security	www.security.netapp.com/advisory/ntap-20230511-0010
cybersecurity-help	www.cybersecurity-help.cz/vdb/SB2023050912
t	www.t.me/cibsecurity/62892

11 May 2023 00:00Current

7.2High risk

Vulners AI Score7.2

CVSS 29

CVSS 3.17.2

EPSS0.00221

SSVC

vulnerable software ibm db2 access control issue remote code execution database management system version recommendations