CVE-2021-38931

published 2021-12-09

CVE-2021-38931: IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.1, and 11.5 is vulnerable to an information disclosure as a result of a connected user…

medium 6.5 CVSS 3.1

AV N AC L PR L UI N S U C H I N A N

IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.1, and 11.5 is vulnerable to an information disclosure as a result of a connected user having indirect read access to a table where they are not authorized to select from. IBM X-Force ID: 210418.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
ibm	db2	—	—
ibm	db2	—	—

CWE-668