Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveIbmCVE-2023-29257
HistoryApr 26, 2023 - 1:15 p.m.

CVE-2023-29257

2023-04-2613:15:08
ibm
web.nvd.nist.gov
68
ibm
db2
linux
unix
windows
remote code execution
database administrator
vulnerability

CVSS3

7.2

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

AI Score

7.1

Confidence

High

EPSS

0.003

Percentile

71.5%

JSON

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to remote code execution as a database administrator of one database may execute code or read/write files from another database within the same instance. IBM X-Force ID: 252011.

Affected configurations

Nvd
Vulners
Node
linuxlinux_kernelMatch-
OR
microsoftwindowsMatch-
AND
ibmdb2Range11.1–11.1.4
OR
ibmdb2Range11.5–11.5.8
OR
ibmdb2Match10.5-
OR
ibmdb2Match10.5fp1
OR
ibmdb2Match10.5fp10
OR
ibmdb2Match10.5fp2
OR
ibmdb2Match10.5fp3
OR
ibmdb2Match10.5fp3a
OR
ibmdb2Match10.5fp4
OR
ibmdb2Match10.5fp5
OR
ibmdb2Match10.5fp6
OR
ibmdb2Match10.5fp7
OR
ibmdb2Match10.5fp8
OR
ibmdb2Match10.5fp9
OR
ibmdb2Match11.1.4-
OR
ibmdb2Match11.1.4fp1
OR
ibmdb2Match11.1.4fp2
OR
ibmdb2Match11.1.4fp3
OR
ibmdb2Match11.1.4fp4
OR
ibmdb2Match11.1.4fp5
OR
ibmdb2Match11.1.4fp6
VendorProductVersionCPE
linuxlinux_kernel-cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
microsoftwindows-cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
ibmdb2*cpe:2.3:a:ibm:db2:*:*:*:*:*:*:*:*
ibmdb210.5cpe:2.3:a:ibm:db2:10.5:-:*:*:*:*:*:*
ibmdb210.5cpe:2.3:a:ibm:db2:10.5:fp1:*:*:*:*:*:*
ibmdb210.5cpe:2.3:a:ibm:db2:10.5:fp10:*:*:*:*:*:*
ibmdb210.5cpe:2.3:a:ibm:db2:10.5:fp2:*:*:*:*:*:*
ibmdb210.5cpe:2.3:a:ibm:db2:10.5:fp3:*:*:*:*:*:*
ibmdb210.5cpe:2.3:a:ibm:db2:10.5:fp3a:*:*:*:*:*:*
ibmdb210.5cpe:2.3:a:ibm:db2:10.5:fp4:*:*:*:*:*:*
Rows per page:
1-10 of 221

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Db2 for Linux, UNIX and Windows",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "10.5, 11.1 ,11.5"
      }
    ]
  }
]

Related

nessus 2
ibm 15
cnvd 1
nvd 1
prion 1
cvelist 1
nessus
nessus
IBM DB2 10.5 < 10.5.0 FP 11 41270 / 11.1 < 11.1.4 FP 7 41268 / 11.5 < 11.5.7 FP 0 29113 / 11.5 < 11.5.8 FP 0 29133 RCE (Unix)
2023-05-08 00:00:00
IBM DB2 10.5 < 10.5.0 FP 11 41270 / 11.1 < 11.1.4 FP 7 41268 / 11.5 < 11.5.7 FP 0 29113 / 11.5 < 11.5.8 FP 0 29133 RCE (Windows)
2023-05-08 00:00:00
ibm
ibm
Security Bulletin: IBM® Db2® is vulnerable to remote code execution as a database administrator of one database may execute code or read/write files from another database within the same instance. (CVE-2023-29257)
2023-04-24 21:44:35
Security Bulletin: IBM Virtualization Engine TS7700 is susceptible to multiple vulnerabilities due to the use of IBM Db2
2024-05-06 22:05:39
Security Bulletin: Multiple Vulnerabilities affect Db2 shipped with Cloud Pak System
2024-07-29 17:00:07
cnvd
cnvd
IBM DB2 Code Execution Vulnerability (CNVD-2023-64883)
2023-05-04 00:00:00
nvd
nvd
CVE-2023-29257
2023-04-26 13:15:08
prion
prion
Remote code execution
2023-04-26 13:15:00
cvelist
cvelist
CVE-2023-29257 IBM Db2 code execution
2023-04-26 12:56:10

CVSS3

7.2

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

AI Score

7.1

Confidence

High

EPSS

0.003

Percentile

71.5%

JSON
Related for CVE-2023-29257
nessus2ibm15cnvd1nvd1prion1cvelist1