Medium severity5.3NVD Advisory· Published Jul 10, 2023· Updated Jun 17, 2026

CVE-2023-29256

Description

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to an information disclosure due to improper privilege management when certain federation features are used. IBM X-Force ID: 252046.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

IBM/Db23 versions
cpe:2.3:a:ibm:db2:10.5.0.11:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:ibm:db2:10.5.0.11:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:db2:11.1.4.7:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:db2:11.5:*:*:*:*:-:*:*
IBM/Db2 for Linux, UNIX and Windowsllm-fuzzy
Range: 10.5, 11.1, and 11.5
IBM/Db2 Recovery Expert for Linux, UNIX and Windowscpe-rescue
Range: 10.5, 11.1 ,11.5

Patches

Vulnerability mechanics

References

exchange.xforce.ibmcloud.com/vulnerabilities/252046nvdVDB EntryVendor Advisory
www.ibm.com/support/pages/node/7010573nvdVendor Advisory
security.netapp.com/advisory/ntap-20230731-0007/nvd

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000