IBM Db2 for Linux, UNIX and Windows information disclosure

CVE-2023-38729

Summary

IBM Db2 for Linux, UNIX and Windows versions 10.5, 11.1, and 11.5 exhibit a vulnerability that allows for potential sensitive information disclosure when the ADMIN_CMD command is utilized in conjunction with the IMPORT or EXPORT operations. This could lead to unauthorized access to information that should otherwise remain confidential. Users of vulnerable versions are advised to review their configurations and apply necessary mitigations to protect their systems against unwanted exposure of sensitive data. For more detailed information, consult the official IBM advisory and associated references.

References