IBM DB2 Recovery Expert for LUW 5.5 Interim Fix 002 does not invalidate session after a timeout which could allow an authenticated user to impersonate another user on the system.
Metrics
Affected Vendors & Products
| Vendors | Products |
|---|---|
| Ibm |
|
Configuration 1 [-]
|
No data.
References
History
Thu, 26 Feb 2026 16:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Ibm db2 Recovery Expert
|
|
| CPEs | cpe:2.3:a:ibm:db2_recovery_expert:5.5.0:interim_fix_002:*:*:*:linux:*:* cpe:2.3:a:ibm:db2_recovery_expert:5.5.0:interim_fix_002:*:*:*:unix:*:* cpe:2.3:a:ibm:db2_recovery_expert:5.5.0:interim_fix_002:*:*:*:windows:*:* |
|
| Vendors & Products |
Ibm db2 Recovery Expert
|
Tue, 17 Feb 2026 20:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | IBM DB2 Recovery Expert for LUW 5.5 Interim Fix 002 does not invalidate session after a timeout which could allow an authenticated user to impersonate another user on the system. | |
| Title | Multiple vulnerabilities in IBM Java SDK affecting Db2 Recovery Expert for Linux, Unix and Windows | |
| First Time appeared |
Ibm
Ibm db2 Recovery Expert For Luw |
|
| Weaknesses | CWE-613 | |
| CPEs | cpe:2.3:a:ibm:db2_recovery_expert_for_luw:5.5:interim_fix_002:*:*:*:*:*:* | |
| Vendors & Products |
Ibm
Ibm db2 Recovery Expert For Luw |
|
| References |
| |
| Metrics |
cvssV3_1
|
MITRE
Status: PUBLISHED
Assigner: ibm
Published:
Updated: 2026-02-17T19:52:46.124Z
Reserved: 2025-03-10T17:14:03.090Z
Link: CVE-2025-27898
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2026-02-17T20:22:01.883
Modified: 2026-02-26T16:33:33.923
Link: CVE-2025-27898
Redhat
No data.