{"id":"CVE-2022-22353","aliases":["EUVD-2022-27499","GHSA-3gf5-98hp-9vr6"],"status":"published","title":"IBM Big SQL on IBM Cloud Pak for Data 7.1.0, 7.1.1, 7.2.0, and 7.2.3 could allow an authenticated...","description":"IBM Big SQL on IBM Cloud Pak for Data 7.1.0, 7.1.1, 7.2.0, and 7.2.3 could allow an authenticated user with appropriate permissions to obtain sensitive information by bypassing data masking rules using a CREATE TABLE SELECT statement. IBM X-Force ID: 220480.","severity":{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/A:N/C:H/AC:H/PR:L/S:U/I:N/UI:N/RC:C/E:U/RL:O","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00899,"percentile":0.59887,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2022-03-14T17:00:25Z","modified":"2026-06-17T04:28:17Z","products":[{"vendor":"ibm","product":"big sql on cloud pak for data"},{"vendor":"ibm","product":"big_sql"}],"references":[{"url":"https://www.ibm.com/support/pages/node/6563021","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/220480","tags":["vdb-entry","x_refsource_XF","x_transferred","VDB Entry","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-22353"},{"url":"https://github.com/advisories/GHSA-3gf5-98hp-9vr6"}],"sources":{"cve":[{"id":"CVE-2022-22353","description":"IBM Big SQL on IBM Cloud Pak for Data 7.1.0, 7.1.1, 7.2.0, and 7.2.3 could allow an authenticated user with appropriate permissions to obtain sensitive information by bypassing data masking rules using a CREATE TABLE SELECT statement. IBM X-Force ID: 220480.","status":"published","published":"2022-03-14T17:00:25.751Z","modified":"2024-09-16T16:22:27.14Z","cvss":[{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/A:N/C:H/AC:H/PR:L/S:U/I:N/UI:N/RC:C/E:U/RL:O","level":"medium","assessor":"cna"}],"updated_at":"2026-11-02T14:34:26.293612Z"}],"euvd":[{"id":"EUVD-2022-27499","description":"IBM Big SQL on IBM Cloud Pak for Data 7.1.0, 7.1.1, 7.2.0, and 7.2.3 could allow an authenticated user with appropriate permissions to obtain sensitive information by bypassing data masking rules using a CREATE TABLE SELECT statement. IBM X-Force ID: 220480.","status":"published","published":"2022-03-14T17:00:25Z","modified":"2024-09-16T16:22:27Z","cvss":[{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/A:N/C:H/AC:H/PR:L/S:U/I:N/UI:N/RC:C/E:U/RL:O","level":"medium"}],"updated_at":"2026-11-03T00:55:52.590586Z"}],"ghsa":[{"id":"GHSA-3gf5-98hp-9vr6","title":"IBM Big SQL on IBM Cloud Pak for Data 7.1.0, 7.1.1, 7.2.0, and 7.2.3 could allow an authenticated...","description":"IBM Big SQL on IBM Cloud Pak for Data 7.1.0, 7.1.1, 7.2.0, and 7.2.3 could allow an authenticated user with appropriate permissions to obtain sensitive information by bypassing data masking rules using a CREATE TABLE SELECT statement. IBM X-Force ID: 220480.","status":"published","published":"2022-03-15T00:00:53Z","modified":"2023-01-27T05:00:42Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T14:41:44.25061Z"}],"nvd":[{"id":"CVE-2022-22353","description":"IBM Big SQL on IBM Cloud Pak for Data 7.1.0, 7.1.1, 7.2.0, and 7.2.3 could allow an authenticated user with appropriate permissions to obtain sensitive information by bypassing data masking rules using a CREATE TABLE SELECT statement. IBM X-Force ID: 220480.","status":"published","published":"2022-03-14T17:15:07.993Z","modified":"2026-06-17T04:28:17.313Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"secondary"},{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:07:13.7085Z"}]}}