CVE-2023-38729: 
IBM Db2 vulnerability analysis and mitigation

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) versions 10.5, 11.1, and 11.5 is vulnerable to sensitive information disclosure. The vulnerability was identified and tracked as CVE-2023-38729 (NetApp Advisory).

The vulnerability has been assessed with a CVSS v3.1 base score of 6.8 (MEDIUM) with the following vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N. This indicates that the vulnerability requires network access, has high attack complexity, requires low privileges, needs no user interaction, has unchanged scope, and can result in high confidentiality and integrity impact, with no availability impact (NetApp Advisory).

Successful exploitation of this vulnerability could lead to disclosure of sensitive information and addition or modification of data in affected IBM Db2 systems (NetApp Advisory).

The vulnerability requires network access and has high attack complexity. Public discussion of this vulnerability has been acknowledged by security researchers (NetApp Advisory).

Affected organizations should monitor vendor communications for patch availability and apply security updates when available. No specific workarounds have been publicly documented at this time (NetApp Advisory).