Skip to content
CVE PROGRAM SOURCE RECORD6.3 Medium

CVE-2025-27898

Multiple vulnerabilities in IBM Java SDK affecting Db2 Recovery Expert for Linux, Unix and Windows

Description

IBM DB2 Recovery Expert for LUW 5.5 Interim Fix 002 does not invalidate session after a timeout which could allow an authenticated user to impersonate another user on the system.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

IBM DB2 Recovery Expert for LUW

  • 5.5 Interim Fix 002affected

References