IBM Db2 information disclosure

CVE-2023-47152

Summary

IBM Db2 for Linux, UNIX, and Windows, along with Db2 Connect Server version 11.5, has been identified as having vulnerabilities related to an insecure cryptographic algorithm. This vulnerability poses a risk of information leakage through stack traces under specific exceptional circumstances, potentially exposing sensitive data to unauthorized users. Users of the affected products are advised to take immediate action to mitigate risks associated with these vulnerabilities, ensuring that best security practices are implemented.

References