Vulnerability · Published Mar 14, 2022 · Assigned by ibm
CVE-2022-22353
Medium 5.3
In plain English
A medium-severity security flaw in Big SQL on Cloud Pak for Data from IBM. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.9% (higher than 60% of all known vulnerabilities).
Severity (CVSS 3.0)5.3Medium
Exploit odds (30 days)0.9%top 40.2% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
IBM Big SQL on IBM Cloud Pak for Data 7.1.0, 7.1.1, 7.2.0, and 7.2.3 could allow an authenticated user with appropriate permissions to obtain sensitive information by bypassing data masking rules using a CREATE TABLE SELECT statement. IBM X-Force ID: 220480.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| IBM | Big SQL on Cloud Pak for Data | 7.1.07.1.17.2.07.2.3 |
References
- https://www.ibm.com/support/pages/node/6563021 x_refsource_CONFIRM
- ibm-bigsql-cve202222353-info-disc (220480) vdb-entry, x_refsource_XF