Vulnerability Description
IBM Db2 9.7, 10.1, 10.5, 11.1, and 11.5 may be vulnerable to an Information Disclosure when using the LOAD utility as under certain circumstances the LOAD utility does not enforce directory restrictions. IBM X-Force ID: 199521.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ibm | Db2 | 9.7 |
| Hp | Hp-Ux | - |
| Ibm | Aix | - |
| Linux | Linux Kernel | - |
| Microsoft | Windows | - |
| Oracle | Solaris | - |
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/195521VDB EntryVendor Advisory
- https://security.netapp.com/advisory/ntap-20220225-0005/Third Party Advisory
- https://www.ibm.com/support/pages/node/6523804PatchVendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/195521VDB EntryVendor Advisory
- https://security.netapp.com/advisory/ntap-20220225-0005/Third Party Advisory
- https://www.ibm.com/support/pages/node/6523804PatchVendor Advisory
FAQ
What is CVE-2021-20373?
CVE-2021-20373 is a vulnerability with a CVSS score of 7.5 (HIGH). IBM Db2 9.7, 10.1, 10.5, 11.1, and 11.5 may be vulnerable to an Information Disclosure when using the LOAD utility as under certain circumstances the LOAD utility does not enforce directory restrictio...
How severe is CVE-2021-20373?
CVE-2021-20373 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2021-20373?
Check the references section above for vendor advisories and patch information. Affected products include: Ibm Db2, Hp Hp-Ux, Ibm Aix, Linux Linux Kernel, Microsoft Windows.