CVE-2022-22390: High severity ibm db2 universal database vulnerability
Published Jun 24, 2022
·Updated
IBM Db2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, 11.1, and 11.5 may be vulnerable to an information disclosure caused by improper privilege management when table function is used. IBM X-Force ID: 221973.
Other sources
IBM Db2 may be vulnerable to an information disclousre caused by improper privilege management when table function is used.
Affected Software
8 affected components
IBM DB2=9.7
IBM DB2=10.1
IBM DB2=10.5
IBM DB2=11.1
IBM DB2=11.5
Linux Linux kernel
Microsoft Windows
Opengroup Unix
Event History
Jun 24, 2022
CVE Published
via MITRE·04:45 PM
Data Sourced
via MITRE·04:45 PM
DescriptionSeverityWeakness
Aug 3, 2024
Data Sourced
via IBM·03:20 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the vulnerability ID?
The vulnerability ID is CVE-2022-22390.
2
What is the severity of CVE-2022-22390?
The severity of CVE-2022-22390 is high with a CVSS score of 7.5.
3
Which software versions are affected by CVE-2022-22390?
IBM Db2 for Linux, UNIX and Windows versions 9.7, 10.1, 10.5, 11.1, and 11.5 are affected by CVE-2022-22390.
4
What is the cause of CVE-2022-22390?
CVE-2022-22390 is caused by improper privilege management when table function is used in IBM Db2.
5
Where can I find more information about CVE-2022-22390?
More information about CVE-2022-22390 can be found at the following references: [1] [2] [3].