CVE-2022-22353

MEDIUM

IBM Big SQL on IBM Cloud Pak for Data <7.2.3 - Info Disclosure

Title source: llm
STIX 2.1

Description

IBM Big SQL on IBM Cloud Pak for Data 7.1.0, 7.1.1, 7.2.0, and 7.2.3 could allow an authenticated user with appropriate permissions to obtain sensitive information by bypassing data masking rules using a CREATE TABLE SELECT statement. IBM X-Force ID: 220480.

References (2)

Core 2
Core References
Vendor Advisory x_refsource_confirm
https://www.ibm.com/support/pages/node/6563021
VDB Entry, Vendor Advisory vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/220480

Scores

CVSS v3 6.5
EPSS 0.0014
EPSS Percentile 33.8%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Details

Status published
Products (4)
ibm/big_sql 7.1.0
ibm/big_sql 7.1.1
ibm/big_sql 7.2.3
ibm/big_sql 7.2.0 - 7.2.3
Published Mar 14, 2022
Tracked Since Feb 18, 2026