CVE-2022-43928

IBM Db2 Mirror for i information disclosure

Medium · published April 7, 2023

CVSS v3.1
4.9
EPSS
1%
Percentile
49.9
In the wild
Unconfirmed
What it is

The IBM Toolbox for Java (Db2 Mirror for i 7.4 and 7.5) could allow a user to obtain sensitive information, caused by utilizing a Java string for processing. Since Java strings are immutable, their contents exist in memory until garbage collected. This means sensitive data could be visible in memory over an indefinite amount of time. IBM has addressed this issue by reducing the amount of time the sensitive data is visible in memory. IBM X-Force ID: 241675.

The record
Technical detail
CVSS v3.1
4.9 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00638 · 49.9th percentile
Published
2023-04-07T13:37Z
EPSS history
Timeline
  • 07 APR 13:37Z
    IBM Db2 Mirror for i information disclosure
    cvelistv5