CVE-2021-38931

IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.1, and 11.5 is vulnerable to an information disclosure as a result of a connected user…

Medium · published December 9, 2021

CVSS v3.0
6.5
EPSS
1%
Percentile
67.9
In the wild
Unconfirmed
What it is

IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.1, and 11.5 is vulnerable to an information disclosure as a result of a connected user having indirect read access to a table where they are not authorized to select from. IBM X-Force ID: 210418.

The record
Technical detail
CVSS v3.0
6.5 · MEDIUM
Vector
CVSS:3.0/PR:L/S:U/AV:N/C:H/AC:L/I:N/UI:N/A:N/RC:C/E:U/RL:O
CVSS v4.0
Not supplied
EPSS
0.01197 · 67.9th percentile
Published
2021-12-09T17:00Z
EPSS history
Timeline
  • 09 DEC 17:00Z
    IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.1, and 11.5 is vulnerable to an information disclosure as a result of a connected user…
    cvelistv5