← Back

CVE-2025-27899

nvd nist
Published: Feb 17, 2026Modified: Jun 17, 2026

JSON object

Loading...
5.3
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Exploitability: 3.9 / Impact: 1.4
Source: psirt@us.ibm.com (Secondary)

Description

IBM DB2 Recovery Expert for LUW 5.5 Interim Fix 002 discloses sensitive information in an environment variable that could aid in further attacks against the system.

Affected (3)

Ibm
1 product
Db2 Recovery Expert
Configuration A
3 vulnerable
Vulnerable SoftwareAffected Versions
Ibm
Db2 Recovery Expert
Version 5.5.0 interim_fix_002
Db2 Recovery Expert
Version 5.5.0 interim_fix_002
Db2 Recovery Expert
Version 5.5.0 interim_fix_002

Related CWEs

CWE-526
Cleartext Storage of Sensitive Information in an Environment Variable
The product uses an environment variable to store unencrypted sensitive information.

References (1)

Source: psirt@us.ibm.com
PatchVendor Advisory

Timeline

No history available yet.