CVE-2022-43927: IBM Db2 for Linux, UNIX and Windows information disclosure
IBM Db2 for Linux, UNIX and Windows 10.5, 11.1, and 11.5 is vulnerable to information Disclosure due to improper privilege management when a specially crafted table access is used. IBM X-Force ID: 241671.
Other sources
IBM Db2 is vulnerable to information Disclosure due to improper privilege management when a specially crafted table access is used.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2022-43927?
CVE-2022-43927 is a vulnerability in IBM Db2 that allows information disclosure due to improper privilege management.
What is the severity of CVE-2022-43927?
The severity of CVE-2022-43927 is high with a CVSS score of 7.5.
Which versions of IBM Db2 are affected by CVE-2022-43927?
IBM Db2 versions 10.5, 11.1, and 11.5 are affected by CVE-2022-43927.
How does CVE-2022-43927 occur?
CVE-2022-43927 occurs when a specially crafted table access is used in IBM Db2 for Linux, UNIX, and Windows.
Is IBM Db2 vulnerable on HP-UX, IBM AIX, Linux kernel, Microsoft Windows, or Oracle Solaris?
No, IBM Db2 is not vulnerable on HP-UX, IBM AIX, Linux kernel, Microsoft Windows, or Oracle Solaris.
Where can I find more information about CVE-2022-43927?
You can find more information about CVE-2022-43927 on the IBM X-Force ID page (https://exchange.xforce.ibmcloud.com/vulnerabilities/241671) and the IBM support page (https://www.ibm.com/support/pages/node/6953759).
What are the Common Weakness Enumerations (CWE) associated with CVE-2022-43927?
The Common Weakness Enumerations (CWE) associated with CVE-2022-43927 are CWE-269 and CWE-200.