PT-2026-20231 · Ibm · Db2 Recovery Expert For Luw

Published 2026-02-17 · Updated 2026-03-09 · CVE-2025-27898

Positive Technologies (AI Summary)

CVSS v3.1

6.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions IBM DB2 Recovery Expert for LUW version 5.5 Interim Fix 002

Description The software does not invalidate sessions after a timeout. This could allow an authenticated user to impersonate another user on the system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Insufficient Session Expiration

Weakness Enumeration

CWE-613

Related Identifiers

CVE-2025-27898

Affected Products

Db2 Recovery Expert For Luw

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-27898 · Security Note
• https://osv.dev/vulnerability/CVE-2025-27898 · Vendor Advisory
• https://t.me/cveNotify/153319 · Telegram Post
• https://ibm.com/support/pages/node/7259901 · Patch, Vendor Advisory
• https://twitter.com/CVEnew/status/2031137200033902949 · Twitter Post
• https://t.me/cveNotify/153322 · Telegram Post
• https://twitter.com/infoflowcloud/status/2031138308403663104 · Twitter Post