Vulnerability Details CVE-2022-22353
IBM Big SQL on IBM Cloud Pak for Data 7.1.0, 7.1.1, 7.2.0, and 7.2.3 could allow an authenticated user with appropriate permissions to obtain sensitive information by bypassing data masking rules using a CREATE TABLE SELECT statement. IBM X-Force ID: 220480.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 35.4%
CVSS Severity
CVSS v3 Score 5.3
CVSS v2 Score 4.0
References
Products affected by CVE-2022-22353
-
cpe:2.3:a:cloudera:data_platform:7.1.3
-
cpe:2.3:a:cloudera:data_platform:7.1.4
-
cpe:2.3:a:cloudera:data_platform:7.1.5
-
cpe:2.3:a:cloudera:data_platform:7.1.7
-
cpe:2.3:a:ibm:big_sql:7.1.0
-
cpe:2.3:a:ibm:big_sql:7.1.1
-
cpe:2.3:a:ibm:big_sql:7.2.3
-
cpe:2.3:a:ibm:cloud_pak_for_data:3.5
-
cpe:2.3:a:ibm:cloud_pak_for_data:4.0