6.5
CVE-2024-37526
- EPSS 0.05%
- Published 27.01.2025 22:15:11
- Last modified 18.08.2025 18:07:27
- Source psirt@us.ibm.com
- Teams watchlist Login
- Open Login
IBM Watson Query on Cloud Pak for Data (IBM Data Virtualization 1.8, 2.0, 2.1, 2.2, and 3.0.0) could allow an authenticated user to obtain sensitive information from objects published using Watson Query due to an improper data protection mechanism.
Data is provided by the National Vulnerability Database (NVD)
Ibm ≫ Data Virtualization On Cloud Pak For Data Version1.8.0
Ibm ≫ Data Virtualization On Cloud Pak For Data Version3.0.0
Ibm ≫ Data Virtualization On Cloud Pak For Data Version4.5.0
Ibm ≫ Data Virtualization On Cloud Pak For Data Version5.0.0
Ibm ≫ Watson Query With Cloud Pak For Data Version2.0
Ibm ≫ Watson Query With Cloud Pak For Data Version2.1
Ibm ≫ Watson Query With Cloud Pak For Data Version2.2
Ibm ≫ Watson Query With Cloud Pak For Data Version4.6
Ibm ≫ Watson Query With Cloud Pak For Data Version4.7
Ibm ≫ Watson Query With Cloud Pak For Data Version4.8
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.05% | 0.147 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| psirt@us.ibm.com | 6.5 | 2.8 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
|
CWE-497 Exposure of Sensitive System Information to an Unauthorized Control Sphere
The product does not properly prevent sensitive system-level information from being accessed by unauthorized actors who do not have the same level of access to the underlying system as the product does.