CVE-2022-41297

CVE-2022-41297 affects IBM Db2U on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data (versions 3.5–4.5). The issue is a cross-site request forgery that could allow an attacker to perform malicious, unauthorised actions transmitted from a trusted user’s session. The vulnerability requires...