CVE-2024-25030 | THREATINT

Assigner	ibm
Reserved	2024-02-03
Published	2024-04-03
Updated	2024-07-12

Description

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1 stores potentially sensitive information in log files that could be read by a local user. IBM X-Force ID: 281677.

MEDIUM: 6.2

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Problem types

CWE-532 Insertion of Sensitive Information into Log File

Product status

Default status

unaffected

11.1

affected

References

https://www.ibm.com/support/pages/node/7145725 vendor-advisory

https://https://exchange.xforce.ibmcloud.com/vulnerabilities/281677 vdb-entry

https://security.netapp.com/advisory/ntap-20240517-0006/

cve.org CVE-2024-25030

nvd.nist.gov CVE-2024-25030

Download JSON