CVE-2023-29257

Published: Apr 26, 2023Modified: Nov 21, 2024

7.2

Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.2 / Impact: 5.9

Source: NVD

Description

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to remote code execution as a database administrator of one database may execute code or read/write files from another database within the same instance. IBM X-Force ID: 252011.

Affected (21)

Products: Ibm: Db2

Ibm

1 product

Db2

Configuration A

21 vulnerable · 2 platform

Vulnerable Software	Affected Versions
Ibm Db2	From 11.1 to 11.1.4
Ibm Db2	From 11.5 to 11.5.8
Ibm Db2	Version 10.5
Ibm Db2	Version 10.5 fp10
Ibm Db2	Version 10.5 fp1
Ibm Db2	Version 10.5 fp2
Ibm Db2	Version 10.5 fp3
Ibm Db2	Version 10.5 fp3a
Ibm Db2	Version 10.5 fp4
Ibm Db2	Version 10.5 fp5
Ibm Db2	Version 10.5 fp6
Ibm Db2	Version 10.5 fp7
Ibm Db2	Version 10.5 fp8
Ibm Db2	Version 10.5 fp9
Ibm Db2	Version 11.1.4
Ibm Db2	Version 11.1.4 fp1
Ibm Db2	Version 11.1.4 fp2
Ibm Db2	Version 11.1.4 fp3
Ibm Db2	Version 11.1.4 fp4
Ibm Db2	Version 11.1.4 fp5
Ibm Db2	Version 11.1.4 fp6