CVE-2023-42005

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-42005
IBM Db2 on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data 3.5, 4.0, 4.5, 4.6, 4.7, and 4.8 could allow a user with access to the Kubernetes pod, to make system calls compromising the security of containers. IBM X-Force ID: 265264.

7.4 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.4 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://exchange.xforce.ibmcloud.com/vulnerabilities/265264 Vendor Advisory
https://www.ibm.com/support/pages/node/7155078 Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/265264 Vendor Advisory
https://www.ibm.com/support/pages/node/7155078 Vendor Advisory
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:a:ibm:db2:3.5:-:*:*:-:*:*:*
cpe:2.3:a:ibm:db2:3.5:refresh_10:*:*:-:*:*:*
cpe:2.3:a:ibm:db2:4.0:-:*:*:-:*:*:*
cpe:2.3:a:ibm:db2:4.0:refresh_9:*:*:-:*:*:*
cpe:2.3:a:ibm:db2:4.5:-:*:*:-:*:*:*
cpe:2.3:a:ibm:db2:4.5:refresh_3:*:*:-:*:*:*
cpe:2.3:a:ibm:db2:4.6:-:*:*:-:*:*:*
cpe:2.3:a:ibm:db2:4.6:refresh_6:*:*:-:*:*:*
cpe:2.3:a:ibm:db2:4.7:-:*:*:-:*:*:*
cpe:2.3:a:ibm:db2:4.7:refresh_4:*:*:-:*:*:*
cpe:2.3:a:ibm:db2:4.8:-:*:*:-:*:*:*
cpe:2.3:a:ibm:db2:4.8:refresh_4:*:*:-:*:*:*
cpe:2.3:a:ibm:db2_warehouse:3.5:-:*:*:*:*:*:*
cpe:2.3:a:ibm:db2_warehouse:3.5:refresh_10:*:*:*:*:*:*
cpe:2.3:a:ibm:db2_warehouse:4.0:-:*:*:*:*:*:*
cpe:2.3:a:ibm:db2_warehouse:4.0:refresh_9:*:*:*:*:*:*
cpe:2.3:a:ibm:db2_warehouse:4.5:-:*:*:*:*:*:*
cpe:2.3:a:ibm:db2_warehouse:4.5:refresh_3:*:*:*:*:*:*
cpe:2.3:a:ibm:db2_warehouse:4.6:-:*:*:*:*:*:*
cpe:2.3:a:ibm:db2_warehouse:4.6:refresh_6:*:*:*:*:*:*
cpe:2.3:a:ibm:db2_warehouse:4.7:-:*:*:*:*:*:*
cpe:2.3:a:ibm:db2_warehouse:4.7:refresh_4:*:*:*:*:*:*
cpe:2.3:a:ibm:db2_warehouse:4.8:-:*:*:*:*:*:*
cpe:2.3:a:ibm:db2_warehouse:4.8:refresh_4:*:*:*:*:*:*
cpe:2.3:a:ibm:cloud_pak_for_data:-:*:*:*:*:*:*:*
History

18 Aug 2025, 15:03

Type Values Removed Values Added
First Time Ibm cloud Pak For Data
Ibm
Ibm db2
Ibm db2 Warehouse
CWE NVD-CWE-noinfo
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/265264 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/265264 - Vendor Advisory
References () https://www.ibm.com/support/pages/node/7155078 - () https://www.ibm.com/support/pages/node/7155078 - Vendor Advisory
CPE cpe:2.3:a:ibm:db2:4.0:-:*:*:-:*:*:*
cpe:2.3:a:ibm:db2_warehouse:4.8:-:*:*:*:*:*:*
cpe:2.3:a:ibm:db2_warehouse:4.7:refresh_4:*:*:*:*:*:*
cpe:2.3:a:ibm:db2_warehouse:3.5:refresh_10:*:*:*:*:*:*
cpe:2.3:a:ibm:db2_warehouse:4.5:-:*:*:*:*:*:*
cpe:2.3:a:ibm:db2_warehouse:4.5:refresh_3:*:*:*:*:*:*
cpe:2.3:a:ibm:db2_warehouse:4.7:-:*:*:*:*:*:*
cpe:2.3:a:ibm:db2_warehouse:4.8:refresh_4:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:4.8:refresh_4:*:*:-:*:*:*
cpe:2.3:a:ibm:db2_warehouse:4.0:refresh_9:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:4.6:-:*:*:-:*:*:*
cpe:2.3:a:ibm:db2_warehouse:4.6:-:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:3.5:-:*:*:-:*:*:*
cpe:2.3:a:ibm:db2:4.6:refresh_6:*:*:-:*:*:*
cpe:2.3:a:ibm:db2_warehouse:4.6:refresh_6:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:4.8:-:*:*:-:*:*:*
cpe:2.3:a:ibm:db2:3.5:refresh_10:*:*:-:*:*:*
cpe:2.3:a:ibm:db2:4.7:refresh_4:*:*:-:*:*:*
cpe:2.3:a:ibm:db2:4.0:refresh_9:*:*:-:*:*:*
cpe:2.3:a:ibm:db2:4.5:-:*:*:-:*:*:*
cpe:2.3:a:ibm:db2_warehouse:4.0:-:*:*:*:*:*:*
cpe:2.3:a:ibm:db2_warehouse:3.5:-:*:*:*:*:*:*
cpe:2.3:a:ibm:cloud_pak_for_data:-:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:4.7:-:*:*:-:*:*:*
cpe:2.3:a:ibm:db2:4.5:refresh_3:*:*:-:*:*:*

21 Nov 2024, 08:22

Type Values Removed Values Added
Summary
  • (es) IBM Db2 on Cloud Pak for Data y Db2 Warehouse on Cloud Pak for Data 3.5, 4.0, 4.5, 4.6, 4.7 y 4.8 podrían permitir a un usuario con acceso al pod de Kubernetes realizar llamadas al sistema que comprometan la seguridad de los contenedores. ID de IBM X-Force: 265264.
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/265264 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/265264 -
References () https://www.ibm.com/support/pages/node/7155078 - () https://www.ibm.com/support/pages/node/7155078 -

29 May 2024, 13:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-29 13:15

Updated : 2025-08-18 15:03

NVD link : CVE-2023-42005

Mitre link : CVE-2023-42005

CVE.ORG link : CVE-2023-42005

JSON object : View

Products Affected

ibm

  • db2_warehouse
  • db2
  • cloud_pak_for_data
CWE
CWE-264

Permissions, Privileges, and Access Controls

NVD-CWE-noinfo