CVE-2022-22353

CVE-2022-22353 affects IBM Big SQL on IBM Cloud Pak for Data (versions 7.1.1; 7.2.0–7.2.3) where a authenticated user with appropriate privileges can bypass data masking rules via CREATE TABLE AS/SELECT, resulting in leakage of sensitive data. The IBM Security Bulletin notes a software defect: da...

CVE-2024-35160

CVE-2024-35160 affects IBM Watson Query on Cloud Pak for Data (DV/WQ) and IBM Db2 Big SQL on Cloud Pak for Data. The root cause is insufficient session expiration that could allow an authenticated user to obtain sensitive information. Affected versions include: DWQ/DV on CPD 1.8, 2.0, 2.1, 2.2 an...