CVE-2023-29256

IBM Db2 information disclosure

Medium · published July 9, 2023

CVSS v3.1
5.3
EPSS
1%
Percentile
57.6
In the wild
Unconfirmed
What it is

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to an information disclosure due to improper privilege management when certain federation features are used. IBM X-Force ID: 252046.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00846 · 57.6th percentile
Published
2023-07-09T23:27Z
EPSS history
Timeline
  • 09 JUL 23:27Z
    IBM Db2 information disclosure
    cvelistv5