CVE-2022-22390 — Improper Privilege Management in IBM DB2

CWE-269 — Improper Privilege Management3 documents3 sources
Severity
7.5HIGHNVD
EPSS
0.3%
top 50.02%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM DB2
Timeline
PublishedJun 24
Latest updateJun 25

Description

IBM Db2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, 11.1, and 11.5 may be vulnerable to an information disclosure caused by improper privilege management when table function is used. IBM X-Force ID: 221973.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NExploitability: 3.9 | Impact: 3.6

Affected Packages1 packages

▶NVDibm/db25 versions+4

🔴Vulnerability Details

2
GHSA
GHSA-hpg2-8gh7-4wq2: IBM Db2 for Linux, UNIX and Windows 9↗2022-06-25
▶
CVEList
CVE-2022-22390: IBM Db2 for Linux, UNIX and Windows 9↗2022-06-24
▶
CVE-2022-22390 — Improper Privilege Management in IBM | cvebase