Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-31870

IBM Db2 for i 7.2, 7.3, 7.4, and 7.5 supplies user defined table function is vulnerable to user enumeration by a local authenticated attacker, without having authority to the related *USRPRF objects. This can be used by a malicious actor to gather information about users that can be targeted in further attacks. IBM X-Force ID: 287174.

Published

2024-06-15T14:15:09.690

Last Modified

2024-11-21T09:14:03.823

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 3.3 (LOW)

Weaknesses
  • Type: Secondary
    CWE-204
  • Type: Primary
    CWE-203
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application ibm i 7.2 Yes
Application ibm i 7.3 Yes
Application ibm i 7.4 Yes
Application ibm i 7.5 Yes
References