PT-2025-45485 · Ibm · Ibm Db2

Published 2025-11-07 · Updated 2025-11-19 · CVE-2025-33012

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions IBM Db2 versions 10.5.0 through 10.5.11 IBM Db2 versions 11.1.0 through 11.1.4.7 IBM Db2 versions 11.5.0 through 11.5.9 IBM Db2 versions 12.1.0 through 12.1.3

Description The software contains a flaw that may allow an authenticated user to regain access after account lockout, specifically due to password use after the expiration date.

Recommendations IBM Db2 versions 10.5.0 through 10.5.11 should be updated. IBM Db2 versions 11.1.0 through 11.1.4.7 should be updated. IBM Db2 versions 11.5.0 through 11.5.9 should be updated. IBM Db2 versions 12.1.0 through 12.1.3 should be updated.

Fix

Weakness Enumeration

CWE-324

Related Identifiers

CVE-2025-33012

Affected Products

Ibm Db2

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-33012 · Security Note
• https://osv.dev/vulnerability/CVE-2025-33012 · Vendor Advisory
• https://twitter.com/CVEnew/status/1986868004106256813 · Twitter Post
• https://t.me/CVEtracker/36794 · Telegram Post
• https://ibm.com/support/pages/node/7250469 · Patch, Vendor Advisory
• https://twitter.com/VulmonFeeds/status/1986938780532523515 · Twitter Post
• https://t.me/cveNotify/143395 · Telegram Post