VDB
CVE-2023-38729
CVE-2023-38729
PUBLISHED
In IBM DB2 existieren mehrere Schwachstellen. Es ist an mehreren Stellen möglich, vertrauliche Informationen einzusehen. Ein entfernter, authentisierter Angreifer kann diese Schwachstellen ausnutzen, um Informationen offenzulegen.
EPSS 0.10% · 26.8th percentile
Risk Scores
EPSS Score
0.10%
26.8th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| IBM | IBM Security Guardium Key Lifecycle Manager 4.1 | |
| IBM | IBM Security Guardium Key Lifecycle Manager 4.2.1 | |
| IBM | IBM DB2 | |
| IBM | IBM License Metric Tool 9.2.0-9.2.35 | |
| IBM | IBM Security Guardium Key Lifecycle Manager 4.2 | |
| IBM | IBM Security Guardium Key Lifecycle Manager 4.1.1 | |
| IBM | IBM Security Guardium Key Lifecycle Manager 4.0 |
Timeline
- Feb 8, 2024 PoC Published
- Apr 2, 2024 CVE Published
- Apr 4, 2024 EPSS Score
- Apr 29, 2024 EPSS Score
- May 20, 2024 CVE Updated
- May 25, 2024 EPSS Score
- Jun 19, 2024 EPSS Score
- Jul 15, 2024 EPSS Score
- Aug 9, 2024 EPSS Score
- Sep 3, 2024 EPSS Score
- Sep 29, 2024 EPSS Score
- Oct 24, 2024 EPSS Score
References
- https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-0766.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-0766 advisory
- https://www.ibm.com/support/pages/node/7145724 advisory
- https://www.ibm.com/support/pages/node/7145721 advisory
- https://www.ibm.com/support/pages/node/7145722 advisory
- https://www.ibm.com/support/pages/node/7145730 advisory
- https://www.ibm.com/support/pages/node/7145725 advisory
- https://www.ibm.com/support/pages/node/7145726 advisory
- https://www.ibm.com/support/pages/node/7145727 advisory
- https://www.ibm.com/support/pages/node/7147904 advisory
- https://www.ibm.com/support/pages/node/7150158 advisory
- http://www.ibm.com/support/pages/node/7153650 advisory