What is CVE-2023-47152?

CVE-2023-47152 is a medium-severity vulnerability in IBM Aix, classified under Generation of Error Message Containing Sensitive Information. CVSS score: 5.9/10. Published 2024-01-22.

How severe is CVE-2023-47152?

Medium severity. CVSS v3 base score is 5.9 out of 10.

Information disclosure in IBM Aix

CVE-2023-47152

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 is vulnerable to an insecure cryptographic algorithm and to information disclosure in stack trace under exceptional conditions.

EPSS: 0.006 (44.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.9 (Medium). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N.

Affected products

Ibm Aix
Ibm Db2
Ibm Db2 For Linux, Unix And Windows — versions 11.5
Ibm Linux_on_ibm_z
Linux Linux_kernel
Microsoft Windows

Weakness classification (CWE)

CWE-209 — Generation of Error Message Containing Sensitive Information

References

psirt@us.ibm.com (vendor-advisory, Patch, Vendor Advisory)
psirt@us.ibm.com (vdb-entry)
af854a3a-2127-422b-91ae-364da2661108

Frequently asked questions

What is CVE-2023-47152?: CVE-2023-47152 is a medium-severity vulnerability in IBM Aix, classified under Generation of Error Message Containing Sensitive Information. CVSS score: 5.9/10. Published 2024-01-22.
How severe is CVE-2023-47152?: Medium severity. CVSS v3 base score is 5.9 out of 10.