PT-2026-51323 · Ibm · Db2 Database+3
CVE-2023-33854
·
Published
2026-06-22
·
Updated
2026-06-22
CVSS v3.1
5.3
Medium
| Vector | AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N |
Name of the Vulnerable Software and Affected Versions
IBM Db2 on Cloud Pak for Data versions 4.8 through 5.3
IBM Db2 Warehouse on Cloud Pak for Data versions 4.8 through 5.3
Description
An authenticated user can bypass client-side validation and manipulate input data by employing man-in-the-middle techniques, which involve an attacker intercepting and altering communication between two parties.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Db2 Database
Db2 On Cloud Pak For Data/Db2 Warehouse On Cloud Pak For Data
Db2
Db2 Warehouse