The vulnerability in IBM Db2 Genius Hub 1.0 arises from a missing initialization vector in the cryptographic algorithm, leading to deterministic encryption that an attacker can manipulate. Because the IV is omitted, a remote authenticated attacker can exploit the algorithm and bypass the security restrictions set by the application, enabling unauthorized access to protected resources or functions. This flaw is classed as a missing cryptographic step (CWE‑325).

The affected system is IBM Db2 Genius Hub, specifically version 1.0. No other versions or products are listed in the vulnerability data, and the impact applies solely to installations running this exact version.

The CVSS score of 3.1 indicates low overall severity, largely due to the remote authenticated nature of the threat and the limited scope of bypass. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog. An authenticated attacker would need network access to the Db2 Genius Hub interface, and once authenticated, could bypass layer security controls. Without a version upgrade, the risk remains that the attacker could misuse privileged actions, but the low CVSS suggests a restricted compromise.