IBM Db2 Genius Hub 1.0 contains an improper verification of cryptographic signature flaw that allows a local attacker to read protected data. The weakness resides in the cryptographic module that authenticates data, as identified by CWE-347, and can lead to disclosure of sensitive information if unsigned or tampered data is supplied. The impact is limited to systems where the application is installed and a local user can manipulate the data streams, potentially exposing confidential data as a result of failure to enforce authenticity.

IBM Db2 Genius Hub 1.0 is the only version listed as vulnerable. The product is a database intelligence platform from IBM that aggregates and analyzes data.

The CVSS score of 5.1 indicates a moderate severity, while the EPSS score is not available, so the likelihood of exploitation is unknown. The vulnerability is not listed in the CISA KEV catalog. The description explicitly states that only local attackers can exploit it, requiring local user access on the host running Db2 Genius Hub to provide forged data for signature verification. Given the lack of remote exploitation mechanisms, the overall risk for systems with strict user controls remains moderate, but the potential for sensitive data leakage warrants attention.