What is the severity of CVE-2022-43928?

CVE-2022-43928 has been assessed with a moderate severity level due to its potential for sensitive information exposure.

How do I fix CVE-2022-43928?

To remediate CVE-2022-43928, apply the available patches SF99668 for version 7.4 and SF99951 for version 7.5 of IBM Db2 Mirror for i.

What are the affected versions in CVE-2022-43928?

CVE-2022-43928 affects IBM Db2 Mirror for i versions 7.4 and 7.5.

What kind of data is at risk with CVE-2022-43928?

CVE-2022-43928 involves the risk of exposure of sensitive data that remains in memory due to Java string immutability.

Which product is associated with CVE-2022-43928?

CVE-2022-43928 is associated with IBM Db2 Mirror for i.

Vulnerability/
CVE-2022-43928

medium

6.5

5/4/2023

7/4/2023

3/8/2024

CVE-2022-43928: IBM Db2 Mirror for i information disclosure

First published: Wed Apr 05 2023(Updated: )

The IBM Toolbox for Java (Db2 Mirror for i 7.4 and 7.5) could allow a user to obtain sensitive information, caused by utilizing a Java string for processing. Since Java strings are immutable, their contents exist in memory until garbage collected. This means sensitive data could be visible in memory over an indefinite amount of time. IBM has addressed this issue by reducing the amount of time the sensitive data is visible in memory. IBM X-Force ID: 241675.

Credit: psirt@us.ibm.com

Affected Software	Affected Version	How to fix
IBM Db2 Mirror for i	=7.4
IBM Db2 Mirror for i	=7.5
IBM Db2 Mirror for i	<=7.4
IBM Db2 Mirror for i	<=7.5

Remedy

https://www.ibm.com/support/pages/node/6981113

Never miss a vulnerability like this again

Reference Links

Parent vulnerabilities

(Appears in the following advisories)

IBM-6981113

Frequently Asked Questions

What is the severity of CVE-2022-43928?
CVE-2022-43928 has been assessed with a moderate severity level due to its potential for sensitive information exposure.
How do I fix CVE-2022-43928?
To remediate CVE-2022-43928, apply the available patches SF99668 for version 7.4 and SF99951 for version 7.5 of IBM Db2 Mirror for i.
What are the affected versions in CVE-2022-43928?
CVE-2022-43928 affects IBM Db2 Mirror for i versions 7.4 and 7.5.
What kind of data is at risk with CVE-2022-43928?
CVE-2022-43928 involves the risk of exposure of sensitive data that remains in memory due to Java string immutability.
Which product is associated with CVE-2022-43928?
CVE-2022-43928 is associated with IBM Db2 Mirror for i.

collector/nvd-index
agent/references
agent/type
agent/softwarecombine
agent/first-publish-date
collector/mitre-cve
source/MITRE
agent/severity
agent/remedy
agent/author
agent/title
agent/last-modified-date
agent/description
agent/event
collector/ibm-support
source/IBM
agent/software-canonical-lookup
agent/trending
agent/tags
agent/source
vendor/ibm
canonical/ibm db2 mirror for i
version/ibm db2 mirror for i/7.4
version/ibm db2 mirror for i/7.5

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.

Frequently Asked Questions

What is the severity of CVE-2022-43928?
CVE-2022-43928 has been assessed with a moderate severity level due to its potential for sensitive information exposure.
How do I fix CVE-2022-43928?
To remediate CVE-2022-43928, apply the available patches SF99668 for version 7.4 and SF99951 for version 7.5 of IBM Db2 Mirror for i.
What are the affected versions in CVE-2022-43928?
CVE-2022-43928 affects IBM Db2 Mirror for i versions 7.4 and 7.5.
What kind of data is at risk with CVE-2022-43928?
CVE-2022-43928 involves the risk of exposure of sensitive data that remains in memory due to Java string immutability.
Which product is associated with CVE-2022-43928?
CVE-2022-43928 is associated with IBM Db2 Mirror for i.