Vulnerability Description
IBM Db2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, 11.1, and 11.5 is vulnerable to an information disclosure in some scenarios due to unauthorized access caused by improper privilege management when CREATE OR REPLACE command is used. IBM X-Force ID: 225979.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ibm | Db2 | 9.7.0.0 |
| Hp | Hp-Ux | - |
| Ibm | Aix | - |
| Linux | Linux Kernel | - |
| Microsoft | Windows | - |
| Oracle | Solaris | - |
Related Weaknesses (CWE)
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/225979VDB EntryVendor Advisory
- https://security.netapp.com/advisory/ntap-20230921-0004/
- https://www.ibm.com/support/pages/node/6618779PatchVendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/225979VDB EntryVendor Advisory
- https://security.netapp.com/advisory/ntap-20230921-0004/
- https://www.ibm.com/support/pages/node/6618779PatchVendor Advisory
FAQ
What is CVE-2022-22483?
CVE-2022-22483 is a vulnerability with a CVSS score of 6.5 (MEDIUM). IBM Db2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, 11.1, and 11.5 is vulnerable to an information disclosure in some scenarios due to unauthorized access caused by improper privilege management when...
How severe is CVE-2022-22483?
CVE-2022-22483 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2022-22483?
Check the references section above for vendor advisories and patch information. Affected products include: Ibm Db2, Hp Hp-Ux, Ibm Aix, Linux Linux Kernel, Microsoft Windows.