Insufficient Session Expiration Vulnerability in IBM Cloud Pak for Data
CVE-2024-35160

6.5MEDIUM

Key Information:

Vendor
IBM
Status
Big Sql
Watson Query With Cloud Pak For Data
Vendor
CVE Published:
23 November 2024

Summary

IBM Watson Query on Cloud Pak for Data 1.8, 2.0, 2.1, 2.2 and IBM Db2 Big SQL on Cloud Pak for Data 7.3, 7.4, 7.5, and 7.6 could allow an authenticated user to obtain sensitive information due to insufficient session expiration.

References

https://www.ibm.com/support/pages/node/7168703
https://www.ibm.com/support/pages/node/7176947

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

.