CVE-2023-29256
Summary
| CVE | CVE-2023-29256 |
|---|
| State | PUBLIC |
|---|
| Assigner | [email protected] |
|---|
| Source Priority | CVE Program / NVD first with legacy fallback |
|---|
| Published | 2023-07-10 16:15:00 UTC |
|---|
| Updated | 2023-07-31 19:15:00 UTC |
|---|
| Description | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to an information disclosure due to improper privilege management when certain federation features are used. IBM X-Force ID: 252046. |
|---|
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|
| Operating System |
Hp |
Hp-ux |
- |
All |
All |
All |
| Operating System |
Ibm |
Aix |
- |
All |
All |
All |
| Application |
Ibm |
Db2 |
10.5.0.11 |
All |
All |
All |
| Application |
Ibm |
Db2 |
11.1.4.7 |
All |
All |
All |
| Application |
Ibm |
Db2 |
11.5 |
All |
All |
All |
| Operating System |
Linux |
Linux Kernel |
- |
All |
All |
All |
| Operating System |
Microsoft |
Windows |
- |
All |
All |
All |
| Operating System |
Oracle |
Solaris |
- |
All |
All |
All |
References
| Reference | Source | Link | Tags |
|---|
| Security Bulletin: IBM® Db2® is vulnerable to information disclosure due to improper privilege management when certain federation features are used. (CVE-2023-29256) |
MISC |
www.ibm.com |
|
| July 2023 IBM DB2 Vulnerabilities in NetApp Products | NetApp Product Security |
MISC |
security.netapp.com |
|
| IBM X-Force Exchange |
MISC |
exchange.xforce.ibmcloud.com |
|
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 20361 IBM DB2 Information Disclosure Vulnerability (7010573)
