VYPR
← All advisories
Medium severity6.5NVD Advisory· Published Mar 14, 2022· Updated Jun 17, 2026

CVE-2022-22353

CVE-2022-22353

Description

IBM Big SQL on IBM Cloud Pak for Data 7.1.0, 7.1.1, 7.2.0, and 7.2.3 could allow an authenticated user with appropriate permissions to obtain sensitive information by bypassing data masking rules using a CREATE TABLE SELECT statement. IBM X-Force ID: 220480.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

7
  • IBM/Big SQLllm-create5 versions
    7.1.0, 7.1.1, 7.2.0, 7.2.3+ 4 more
    • (no CPE)range: 7.1.0, 7.1.1, 7.2.0, 7.2.3
    • cpe:2.3:a:ibm:big_sql:7.1.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:big_sql:7.1.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:big_sql:*:*:*:*:*:*:*:*range: >=7.2.0,<=7.2.3
    • cpe:2.3:a:ibm:big_sql:7.2.3:*:*:*:*:*:*:*
  • IBM/Cloud Pak For Datallm-fuzzy
    Range: 7.1.0, 7.1.1, 7.2.0, 7.2.3
  • IBM/Datastage On Cloud Pak For Datacpe-rescue
    Range: 7.1.0

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.