CVE-2021-29752

Опубликовано: 16 сент. 2021

Источник: nvd

CVSS3: 4.4

CVSS2: 3.5

EPSS Низкий

Описание

IBM Db2 11.2 and 11.5 contains an information disclosure vulnerability, exposing remote storage credentials to privileged users under specific conditions. IBM X-Fporce ID: 201780.

Ссылки

https://exchange.xforce.ibmcloud.com/vulnerabilities/201780
VDB Entry
Vendor Advisory
https://security.netapp.com/advisory/ntap-20220526-0003/
Third Party Advisory
https://www.ibm.com/support/pages/node/6489489
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/201780
VDB Entry
Vendor Advisory
https://security.netapp.com/advisory/ntap-20220526-0003/
Third Party Advisory
https://www.ibm.com/support/pages/node/6489489
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:db2:11.2:*:*:*:*:-:*:*

cpe:2.3:a:ibm:db2:11.5:*:*:*:*:-:*:*

EPSS

Процентиль: 58%

0.00361

Низкий

4.4 Medium

CVSS3

4.4 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-xjhh-xcpq-fjx4

CVSS3: 4.4

github

больше 3 лет назад

IBM Db2 11.2 and 11.5 contains an information disclosure vulnerability, exposing remote storage credentials to privileged users under specific conditions. IBM X-Fporce ID: 201780.

EPSS

Процентиль: 58%

0.00361

Низкий

4.4 Medium

CVSS3

4.4 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

NVD-CWE-noinfo