CVEvulnerability
CVE-2022-22390
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2022-06-24
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS 3.0 ([email protected])
- 6.2 MEDIUM — CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-269
Description
IBM Db2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, 11.1, and 11.5 may be vulnerable to an information disclosure caused by improper privilege management when table function is used. IBM X-Force ID: 221973.
Affected configurations
• ibm db2 9.7
• ibm db2 10.1
• ibm db2 10.5
• ibm db2 11.1
• ibm db2 11.5
Related
Weakness · CWE (1)
- CWE-269 Improper Privilege Management weakness
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/221973 VDB Entry, Vendor Advisory
- https://security.netapp.com/advisory/ntap-20220729-0007/ Third Party Advisory
- https://www.ibm.com/support/pages/node/6597993 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/221973 VDB Entry, Vendor Advisory
- https://security.netapp.com/advisory/ntap-20220729-0007/ Third Party Advisory
- https://www.ibm.com/support/pages/node/6597993 Vendor Advisory