What is GHSA-2r56-qgv4-c7wj?

GHSA-2r56-qgv4-c7wj is a security advisory published by GitHub Security Advisories with Medium severity. IBM Db2 on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data versions 4.8, 5.0, 5.1, 5.2...

Which CVE IDs does GHSA-2r56-qgv4-c7wj cover?

GHSA-2r56-qgv4-c7wj covers the following CVE IDs: CVE-2025-2669. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-2r56-qgv4-c7wj?

GHSA-2r56-qgv4-c7wj has a CVSS v3 base score of 6.0, published by GitHub Security Advisories.

GHSA-2r56-qgv4-c7wjMediumCVSS 6.0

IBM Db2 on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data versions 4.8, 5.0, 5.1, 5.2...

Vendor

GitHub Security Advisories

Published

June 22, 2026

Last Modified

June 22, 2026

🔗 CVE IDs covered (1)

CVE-2025-2669 →

📋 Description

IBM Db2 on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data versions 4.8, 5.0, 5.1, 5.2, 5.3 could allow a privileged user to perform operations and obtain sensitive information outside of their authority due to improper token validation.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2025-2669
https://www.ibm.com/support/pages/node/7277112
https://github.com/advisories/GHSA-2r56-qgv4-c7wj