CVE-2023-29256
Assigner: ibm
Published: 2023-07-09T23:27:56.560Z
State: PUBLISHED
affected: defaultStatus: unaffected
product: Db2 for Linux, UNIX and Windows
vendor: IBM
versions: status: affected
version: 10.5, 11.1 ,11.5
descriptions: supportingMedia: base64: no
type: text/html
value: IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to an information disclosure due to improper privilege management when certain federation features are used.  IBM X-Force ID:  252046.
value: IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to an information disclosure due to improper privilege management when certain federation features are used.  IBM X-Force ID:  252046.
metrics: cvssV3_1: attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 5.3
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
version: 3.1
format: CVSS
scenarios: value: GENERAL
problemTypes: descriptions: description: 284 Improper Access Control
source: discovery: UNKNOWN
title: IBM Db2 information disclosure
x_generator: engine: Vulnogram 0.1.0-dev