VULNERABILITY INTELLIGENCE

CVE-2023-29256

CVSS score5.3 MEDIUM
EPSS probability0.85%
CISA KEVNot currently listed
Published2023-07-10
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

Description

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to an information disclosure due to improper privilege management when certain federation features are used. IBM X-Force ID: 252046.

Weakness classification

  • nvd@nist.gov: CWE-269

Primary references