IBM Db2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, 11.1, and 11.5 is vulnerable to an information disclosure in some scenarios due to unauthorized access caused by improper privilege management when CREATE OR REPLACE command is used. IBM X-Force ID: 225979.
References
| Link | Resource |
|---|---|
| https://exchange.xforce.ibmcloud.com/vulnerabilities/225979 | VDB Entry Vendor Advisory |
| https://security.netapp.com/advisory/ntap-20230921-0004/ | |
| https://www.ibm.com/support/pages/node/6618779 | Patch Vendor Advisory |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/225979 | VDB Entry Vendor Advisory |
| https://security.netapp.com/advisory/ntap-20230921-0004/ | |
| https://www.ibm.com/support/pages/node/6618779 | Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
21 Nov 2024, 06:46
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/225979 - VDB Entry, Vendor Advisory | |
| References | () https://security.netapp.com/advisory/ntap-20230921-0004/ - | |
| References | () https://www.ibm.com/support/pages/node/6618779 - Patch, Vendor Advisory |
21 Sep 2023, 17:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
08 Aug 2023, 14:21
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-269 |
Information
Published : 2022-09-13 21:15
Updated : 2024-11-21 06:46
NVD link : CVE-2022-22483
Mitre link : CVE-2022-22483
CVE.ORG link : CVE-2022-22483
JSON object : View
Products Affected
ibm
- aix
- db2
oracle
- solaris
microsoft
- windows
hp
- hp-ux
linux
- linux_kernel
CWE
CWE-269
Improper Privilege Management