CVE-2023-38729: IBM Db2 information disclosure
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to sensitive information disclosure when using ADMINCMD with IMPORT or EXPORT.
Other sources
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) is vulnerable to sensitive information disclosure when using ADMINCMD with IMPORT or EXPORT.
— IBM
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-38729?
CVE-2023-38729 has been classified as a medium severity vulnerability due to its potential for sensitive information disclosure.
How do I fix CVE-2023-38729?
To fix CVE-2023-38729, it is recommended to apply the latest security patches provided by IBM for the affected versions of Db2.
What versions of IBM Db2 are affected by CVE-2023-38729?
CVE-2023-38729 affects IBM Db2 versions 10.5, 11.1, and 11.5, specifically when using ADMIN_CMD with IMPORT or EXPORT.
What type of information can be disclosed due to CVE-2023-38729?
CVE-2023-38729 can lead to sensitive information disclosure, which may include critical data stored within the database.
Is there a workaround for CVE-2023-38729?
Currently, there are no documented workarounds for CVE-2023-38729 besides applying the recommended patches.