Vulnerability · Published May 29, 2024 · Assigned by ibm
CVE-2023-42005IBM Db2 on Cloud Pak for Data privilege escalation
High 7.4
In plain English
A high-severity security flaw in Db2 on Cloud Pak for Data from IBM. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 21% of all known vulnerabilities).
Severity (CVSS 3.1)7.4High
Exploit odds (30 days)0.3%top 78.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
IBM Db2 on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data 3.5, 4.0, 4.5, 4.6, 4.7, and 4.8 could allow a user with access to the Kubernetes pod, to make system calls compromising the security of containers. IBM X-Force ID: 265264.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| IBM | Db2 on Cloud Pak for Data | 3.5, 4.0, 4.5, 4.6, 4.7, 4.8 |
Weakness: CWE-264 · Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H