6.0
Medium
CVE-2025-2669 IBM Db2 on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data versions 4.8, 5.0, 5.1, 5.2, 5.3 could allow a…
Description
IBM Db2 on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data versions 4.8, 5.0, 5.1, 5.2, 5.3 could allow a privileged user to perform operations and obtain sensitive information outside of their authority due to improper token validation.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Db2 on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data 5.0 | 5.0.0 → 5.3.0 | No fix stated |
| Db2 on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data | 4.8.0 | No fix stated |