Vulnerability Description
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 is vulnerable to an insecure cryptographic algorithm and to information disclosure in stack trace under exceptional conditions.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ibm | Db2 | < 11.5.9 |
| Ibm | Aix | - |
| Ibm | Linux On Ibm Z | - |
| Linux | Linux Kernel | - |
| Microsoft | Windows | - |
Related Weaknesses (CWE)
References
- https://security.netapp.com/advisory/ntap-20240307-0001/
- https://www.ibm.com/support/pages/node/7105605PatchVendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/270730
- https://security.netapp.com/advisory/ntap-20240307-0001/
- https://www.ibm.com/support/pages/node/7105605PatchVendor Advisory
FAQ
What is CVE-2023-47152?
CVE-2023-47152 is a vulnerability with a CVSS score of 5.9 (MEDIUM). IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 is vulnerable to an insecure cryptographic algorithm and to information disclosure in stack trace under exceptional conditions.
How severe is CVE-2023-47152?
CVE-2023-47152 has been rated MEDIUM with a CVSS base score of 5.9/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2023-47152?
Check the references section above for vendor advisories and patch information. Affected products include: Ibm Db2, Ibm Aix, Ibm Linux On Ibm Z, Linux Linux Kernel, Microsoft Windows.