CVE-2022-43927: Infoleak

Reference Links

• https://exchange.xforce.ibmcloud.com/vulnerabilities/241671
• https://www.ibm.com/support/pages/node/6953759 (Advisory)

Parent vulnerabilities

(Appears in the following advisories)

• IBM-6953759

Frequently Asked Questions

• What is CVE-2022-43927?

  CVE-2022-43927 is a vulnerability in IBM Db2 that allows information disclosure due to improper privilege management.

• What is the severity of CVE-2022-43927?

  The severity of CVE-2022-43927 is high with a CVSS score of 7.5.

• Which versions of IBM Db2 are affected by CVE-2022-43927?

  IBM Db2 versions 10.5, 11.1, and 11.5 are affected by CVE-2022-43927.

• How does CVE-2022-43927 occur?

  CVE-2022-43927 occurs when a specially crafted table access is used in IBM Db2 for Linux, UNIX, and Windows.

• Is IBM Db2 vulnerable on HP-UX, IBM AIX, Linux kernel, Microsoft Windows, or Oracle Solaris?

  No, IBM Db2 is not vulnerable on HP-UX, IBM AIX, Linux kernel, Microsoft Windows, or Oracle Solaris.

• Where can I find more information about CVE-2022-43927?

  You can find more information about CVE-2022-43927 on the IBM X-Force ID page (https://exchange.xforce.ibmcloud.com/vulnerabilities/241671) and the IBM support page (https://www.ibm.com/support/pages/node/6953759).

• What are the Common Weakness Enumerations (CWE) associated with CVE-2022-43927?

  The Common Weakness Enumerations (CWE) associated with CVE-2022-43927 are CWE-269 and CWE-200.