CVE-2021-38971

CVE-2021-38971 affects IBM Data Virtualization on Cloud Pak for Data (DV/CPD) versions 1.3.0, 1.4.1, 1.5.0, 1.7.1–1.7.3, where an authorized user could bypass data masking rules and access unmasked data. Root cause: a defect in data masking enforcement during CREATE TABLE AS SELECT WITH DATA, ena...

Security Bulletin: Data masking rules are not enforced when CREATE TABLE AS SELECT statement is executed in IBM Data Virtualization on Cloud Pak for Data

Summary There is a defect in IBM Data Virtualization on Cloud Pak for Data where Watson Knowledge Catalog data masking rules will not be enforced when a user executes CREATE TABLE AS SELECT … WITH DATA statement successfully. The newly created table will contain unmasked data. Vulnerability Detai...