Improper Privilege Management in IBM Watson Query for Cloud Pak for Data
CVE-2024-22341

5.3MEDIUM

Key Information:

Vendor
IBM
Status
Watson Query On Cloud Pak For Data
Vendor
CVE Published:
22 February 2025

Summary

The IBM Watson Query feature in Cloud Pak for Data allows for unauthorized remote access to data sources due to flaws in its privilege management protocols. This could result in sensitive data exposure, impacting the confidentiality and integrity of data within the affected versions. Organizations using versions 4.0.0 to 4.0.9, 4.5.0 to 4.5.3, 4.6.0 to 4.6.6, 4.7.0 to 4.7.4, and 4.8.0 to 4.8.7 are particularly vulnerable and should prioritize remediation steps.

Affected Version(s)

Watson Query on Cloud Pak for Data 4.8.0 <= 4.8.7

Watson Query on Cloud Pak for Data 4.7.0 <= 4.7.4

Watson Query on Cloud Pak for Data 4.6.0 <= 4.6.6

References

https://www.ibm.com/support/pages/node/7183851
vendor-advisory

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.