CVE-2021-29752: Medium severity ibm ibm® db2® vulnerability

Published Sep 16, 2021

Updated

IBM Db2 11.2 and 11.5 contains an information disclosure vulnerability, exposing remote storage credentials to privileged users under specific conditions. IBM X-Fporce ID: 201780.

Other sources

IBM Db2 contains an information disclosure vulnerability, exposing remote storage credentials to privileged users under specific conditions.

Affected Software

2 affected components

IBM DB2=11.2

IBM DB2=11.5

Event History

Sep 16, 2021

CVE Published

via MITRE·03:50 PM

Data Sourced

via MITRE·03:50 PM

DescriptionSeverityWeakness

Aug 3, 2024

Data Sourced

via IBM·10:22 PM

DescriptionSeverityAffected Software

Parent advisories

This vulnerability appears in the following advisories.

IBM-6489489

Frequently Asked Questions

What is CVE-2021-29752?

CVE-2021-29752 is an information disclosure vulnerability in IBM Db2 that exposes remote storage credentials to privileged users under specific conditions.

What is the severity of CVE-2021-29752?

CVE-2021-29752 has a severity rating of 4.4 (medium).

Which versions of IBM Db2 are affected by CVE-2021-29752?

IBM Db2 versions 11.2 and 11.5 are affected by CVE-2021-29752.

How can CVE-2021-29752 be exploited?

CVE-2021-29752 can be exploited by privileged users under specific conditions to expose remote storage credentials.

Are there any references for CVE-2021-29752?

Yes, you can find more information about CVE-2021-29752 at the following references: [Link 1](https://exchange.xforce.ibmcloud.com/vulnerabilities/201780), [Link 2](https://security.netapp.com/advisory/ntap-20220526-0003/), [Link 3](https://www.ibm.com/support/pages/node/6489489).