CVE-2022-43930: IBM Db2 for Linux, UNIX and Windows information disclosure

Published Feb 17, 2023

Updated

IBM Db2 for Linux, UNIX and Windows 10.5, 11.1, and 11.5 is vulnerable to an Information Disclosure as sensitive information may be included in a log file. IBM X-Force ID: 241677.

Other sources

IBM Db2 is vulernable to an Information Disclosure as sensitive information may be included in a log file.

Affected Software

4 affected components

IBM Db2 Windows=10.5

IBM Db2 Windows=11.1

IBM Db2 Windows=11.5

Microsoft Windows

Remediation

Patch Available

https://www.ibm.com/support/pages/node/6953755

Event History

Feb 17, 2023

CVE Published

via MITRE·05:04 PM

Data Sourced

via MITRE·05:04 PM

DescriptionSeverityWeakness

Aug 3, 2024

Data Sourced

via IBM·01:46 PM

DescriptionSeverityAffected Software

Parent advisories

This vulnerability appears in the following advisories.

IBM-6953755

Frequently Asked Questions

What is the severity of CVE-2022-43930?

The severity of CVE-2022-43930 is high with a severity value of 7.5.

Which versions of IBM Db2 are affected by CVE-2022-43930?

IBM Db2 10.5, 11.1, and 11.5 are affected by CVE-2022-43930.

What is the vulnerability description of CVE-2022-43930?

CVE-2022-43930 is an information disclosure vulnerability in IBM Db2 where sensitive information may be included in a log file.

How can I fix CVE-2022-43930?

To fix CVE-2022-43930, it is recommended to apply the necessary patches or updates provided by IBM.

Where can I find more information about CVE-2022-43930?

You can find more information about CVE-2022-43930 on the IBM X-Force ID: 241677 page and the IBM support page.