Data Masking Bypass Vulnerability in IBM Big SQL on IBM Cloud Pak for Data

CVE-2022-22353 · MEDIUM Severity

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

IBM Big SQL on IBM Cloud Pak for Data 7.1.0, 7.1.1, 7.2.0, and 7.2.3 could allow an authenticated user with appropriate permissions to obtain sensitive information by bypassing data masking rules using a CREATE TABLE SELECT statement. IBM X-Force ID: 220480.

Learn more about our Cis Benchmark Audit For Microsoft Sql Server.