PT-2026-51323 · Ibm · Db2 On Cloud Pak For Data/Db2 Warehouse On Cloud Pak For Data

Publicado 2026-06-22 · Atualizado 2026-06-22 · CVE-2023-33854

Mitre

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N

IBM Db2 on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data versions 4.8, 5.0, 5.1, 5.2, and 5.3 could allow an authenticated user to bypass client-side validation and manipulate input data using man in the middle techniques.

Correção

Enumeração de Fraquezas

CWE-294

Identificadores relacionados

CVE-2023-33854

Produtos afetados

Db2 On Cloud Pak For Data/Db2 Warehouse On Cloud Pak For Data

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2023-33854 · Nota de Segurança
• https://ibm.com/support/pages/node/7277112 · Correção, Aviso do Fabricante