CVE-2023-29257

published 2023-04-26

CVE-2023-29257: IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to remote code execution as a database administrator of…

high 7.2 CVSS 3.1

AV N AC L PR H UI N S U C H I H A H

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to remote code execution as a database administrator of one database may execute code or read/write files from another database within the same instance. IBM X-Force ID: 252011.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
ibm	db2	—	—
ibm	db2	—	—
ibm	db2	>= 11.1 < 11.1.4	11.1.4
ibm	db2	>= 11.5 < 11.5.8	11.5.8