CVE-2024-22341CWE-73

IBM Watson Query on Cloud Pak for Data information disclosure

Medium · published February 22, 2025

CVSS v3.1
5.3
EPSS
0%
Percentile
39.1
In the wild
Unconfirmed
What it is

IBM Watson Query on Cloud Pak for Data 4.0.0 through 4.0.9, 4.5.0 through 4.5.3, 4.6.0 through 4.6.6, 4.7.0 through 4.7.4, and 4.8.0 through 4.8.7 could allow unauthorized data access from a remote data source object due to improper privilege management.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00463 · 39.1th percentile
Weakness
CWE-73 · External Control of File Name or Path
Published
2025-02-22T00:38Z
EPSS history
Timeline
  • 22 FEB 00:38Z
    IBM Watson Query on Cloud Pak for Data information disclosure
    cvelistv5