Riskcovery

CVE-2025-33012

IBM Db2 improper account lockout

State
Published
Severity
6.3 Medium
Published
Nov 7, 2025
Updated
Nov 7, 2025
Reserved
Apr 15, 2025

Read the record on cve.org

Description

IBM Db2 10.5.0 through 10.5.11, 11.1.0 through 11.1.4.7, 11.5.0 through 11.5.9, and 12.1.0 through 12.1.3 for Linux could allow an authenticated user to regain access after account lockout due to password use after expiration date.

Scores

CVSSScoreVectorSource
3.16.3 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:Libm

Weaknesses

  • CWE-324 Use of a Key Past its Expiration Date

Affected Products

ProductVersions
Db2IBM
  • 10.5.0 through 10.5.11Affected
  • 11.1.0 through 11.1.4.7Affected
  • 11.5.0 through 11.5.9Affected
  • 12.1.0 through 12.1.3Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.