CVE-2021-38931

IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.1, and 11.5 is vulnerable to an information disclosure as a result of a connected user having indirect read access to a table where they are not authorized to select from. IBM X-Force ID: 210418.
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:a:ibm:db2:11.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:11.5:*:*:*:*:-:*:*
OR cpe:2.3:o:hp:hp-ux:-:*:*:*:*:*:*:*
cpe:2.3:o:ibm:aix:-:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
cpe:2.3:o:oracle:solaris:-:*:*:*:*:*:-:*

Configuration 2 (hide)

cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*

History

21 Jan 2022, 14:47

Type Values Removed Values Added
CPE cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*
References (CONFIRM) https://security.netapp.com/advisory/ntap-20220114-0001/ - (CONFIRM) https://security.netapp.com/advisory/ntap-20220114-0001/ - Third Party Advisory
First Time Netapp
Netapp oncommand Insight

14 Jan 2022, 07:15

Type Values Removed Values Added
References
  • (CONFIRM) https://security.netapp.com/advisory/ntap-20220114-0001/ -

14 Dec 2021, 17:38

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown
v2 : 4.0
v3 : 6.5
CWE CWE-668
CPE cpe:2.3:o:ibm:aix:-:*:*:*:*:*:*:*
cpe:2.3:o:oracle:solaris:-:*:*:*:*:*:-:*
cpe:2.3:o:hp:hp-ux:-:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:11.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:11.5:*:*:*:*:-:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
References (XF) https://exchange.xforce.ibmcloud.com/vulnerabilities/210418 - (XF) https://exchange.xforce.ibmcloud.com/vulnerabilities/210418 - VDB Entry, Vendor Advisory
References (CONFIRM) https://www.ibm.com/support/pages/node/6523810 - (CONFIRM) https://www.ibm.com/support/pages/node/6523810 - Vendor Advisory

09 Dec 2021, 18:15

Type Values Removed Values Added
New CVE

Information

Published : 2021-12-09 17:15

Updated : 2022-01-21 14:47


NVD link : CVE-2021-38931

Mitre link : CVE-2021-38931


JSON object : View

Products Affected

ibm

  • aix
  • db2

netapp

  • oncommand_insight

linux

  • linux_kernel

oracle

  • solaris

hp

  • hp-ux

microsoft

  • windows
CWE
CWE-668

Exposure of Resource to Wrong Sphere