VULNERABILITY INTELLIGENCE

CVE-2025-36131

CVSS score4.6 MEDIUM
EPSS probability0.19%
CISA KEVNot currently listed
Published2025-11-07
Last modified2026-10-07
CVSS vectorCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

IBM Db2 11.1.0 through 11.1.4.7, 11.5.0 through 11.5.9, and 12.1.0 through 12.1.3 for Linux, UNIX and Windows (includes Db2 Connect Server) clpplus command exposes user credentials to the terminal which could be obtained by a third party with physical access to the system.

Weakness classification

  • psirt@us.ibm.com: CWE-359

Primary references