Question 1

What is CVE-2021-20373?

Accepted Answer

CVE-2021-20373 is a high-severity software vulnerability with a CVSS score of 7.5. IBM Db2 9.7, 10.1, 10.5, 11.1, and 11.5 may be vulnerable to an Information Disclosure when using the LOAD utility as under certain circumstances the LOAD utility does not enforce directory restrictions. IBM X-Force ID: 199521.

Question 2

Is CVE-2021-20373 being actively exploited?

Accepted Answer

It is not currently in CISA's KEV catalog. Its EPSS exploitation probability is 1%.

Question 3

What products does CVE-2021-20373 affect?

Accepted Answer

Tracked products affected include IBM Db2, Solaris. Check the version you run to see whether it is affected.

Question 4

How do I fix CVE-2021-20373?

Accepted Answer

Apply the vendor fix promptly. An official patch or advisory is available. Upgrade affected products to a fixed version.

CVE-2021-20373

Summary

Impact & exploitability

Affected products we track (2)

Recommendation

Additional information