CVEvulnerability
CVE-2023-47152
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2024-01-22
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.9 MEDIUM — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- Weaknesses
- CWE-209
Description
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 is vulnerable to an insecure cryptographic algorithm and to information disclosure in stack trace under exceptional conditions.
Affected configurations
• ibm db2 (< 11.5.9)
Related
Weakness · CWE (1)
- CWE-209 Generation of Error Message Containing Sensitive Information weakness
References
- https://security.netapp.com/advisory/ntap-20240307-0001/ security.netapp.com
- https://www.ibm.com/support/pages/node/7105605 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/270730 exchange.xforce.ibmcloud.com
- https://security.netapp.com/advisory/ntap-20240307-0001/ security.netapp.com
- https://www.ibm.com/support/pages/node/7105605 Patch, Vendor Advisory