Insufficient Session Expiration Vulnerability in IBM Cloud Pak for Data

CVE-2024-35160

6.5MEDIUM

Key Information

Vendor: IBM
Status: Big Sql; Watson Query With Cloud Pak For Data
Vendor: CVE Published:; 23 November 2024

Summary

IBM Watson Query on Cloud Pak for Data 1.8, 2.0, 2.1, 2.2 and IBM Db2 Big SQL on Cloud Pak for Data 7.3, 7.4, 7.5, and 7.6 could allow an authenticated user to obtain sensitive information due to insufficient session expiration.

CVSS V3.1

Score:

6.5

Severity:

MEDIUM

Confidentiality:

High

Integrity:

None

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

None

Scope:

Unchanged

Timeline

Vulnerability published.
Nov 23, 2024

Collectors

NVD Database