CVE-2024-37526CWE-497

IBM Watson Query on Cloud Pak for Data information disclosure

Medium · published January 27, 2025

CVSS v3.1
6.5
EPSS
0%
Percentile
40.2
In the wild
Unconfirmed
What it is

IBM Watson Query on Cloud Pak for Data (IBM Data Virtualization 1.8, 2.0, 2.1, 2.2, and 3.0.0) could allow an authenticated user to obtain sensitive information from objects published using Watson Query due to an improper data protection mechanism.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00477 · 40.2th percentile
Weakness
CWE-497 · Exposure of Sensitive System Information to an Unauthorized Control Sphere
Published
2025-01-27T21:53Z
EPSS history
Timeline
  • 27 JAN 21:53Z
    IBM Watson Query on Cloud Pak for Data information disclosure
    cvelistv5