Data Manipulation Vulnerability in Watson CP4D Data Stores
CVE-2023-28512
5.9MEDIUM
Summary
IBM Watson CP4D Data Stores versions 4.6.0, 4.6.1, and 4.6.2 are prone to a vulnerability that could allow malicious actors, who possess specific insights about the system, to manipulate data. This issue stems from improper input validation, enabling unauthorized data alteration. Users and administrators of these affected versions should assess their systems and implement necessary measures to mitigate the risks associated with this vulnerability. For more information and guidance, reference IBM's official advisory.
Affected Version(s)
Watson CP4D Data Stores 4.6.0, 4.6.1, 4.6.2
References
CVSS V3.1
Score:
5.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved