What’s Vulnerable › Vulnerabilities

CVE-2024-31870: IBM i information disclosure

• Severity: low (CVSS 3.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-06-15 · updated 2026-06-17
• Weakness: CWE-204

Description

IBM Db2 for i 7.2, 7.3, 7.4, and 7.5 supplies user defined table function is vulnerable to user enumeration by a local authenticated attacker, without having authority to the related *USRPRF objects. This can be used by a malicious actor to gather information about users that can be targeted in further attacks. IBM X-Force ID: 287174.

Affected products

• IBM i: 7.2, 7.3, 7.4, 7.5

References

• https://exchange.xforce.ibmcloud.com/vulnerabilities/287174
• https://www.ibm.com/support/pages/node/7157638
• https://exchange.xforce.ibmcloud.com/vulnerabilities/287174
• https://security.netapp.com/advisory/ntap-20240822-0006/
• https://www.ibm.com/support/pages/node/7157638

Get alerted when CVE-2024-31870 or the next vulnerability affects your stack