CVE-2022-22390 MEDIUM

CVE-2022-22390

Vendor Ibm
Product DB2 for Linux, UNIX and Windows
Published June 24, 2022
Last update September 16, 2024
View on NVD All CVEs

CVSS base score

6.2/10
Attack vector Local
Attack complexity Low
Privileges required None
User interaction None
Confidentiality High
Integrity None

CVSS vector

CVSS:3.0/AC:L/PR:N/UI:N/A:N/C:H/I:N/S:U/AV:L/RC:C/E:U/RL:O

What the vulnerability does

01Description

IBM Db2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, 11.1, and 11.5 may be vulnerable to an information disclosure caused by improper privilege management when table function is used. IBM X-Force ID: 221973.

Key dates

02Disclosure timeline

June 24, 2022 CVE published
September 16, 2024 Record updated