Main Vulnerability Database SB2022080513

SB2022080513 - Prototype pollution in IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data

Published: August 5, 2022 Updated: March 6, 2024

Security Bulletin ID SB2022080513

Severity

Low

Patch available

YES

Number of vulnerabilities 1

Exploitation vector Remote access

Highest impact Denial of service

Breakdown by Severity

Low
Medium
High
Critical

Description

This security bulletin contains information about 1 security vulnerability.

1) Prototype pollution (CVE-ID: CVE-2019-11358)

The vulnerability allows a remote attacker to execute arbitrary JavaScript code.

The vulnerability exists due to improper input validation. A remote attacker can pass specially crafted input to the application and perform prototype pollution, which can result in information disclosure or data manipulation.

Remediation

Install update from vendor's website.

References

https://www.ibm.com/blogs/psirt/security-bulletin-ibm-watson-speech-services-cartridge-for-ibm-cloud-pak-for-data-is-vulnerable-to-cross-site-scripting-in-jquery-cve-2019-11358/"
https://www.ibm.com/blogs/psirt/security-bulletin-ibm-watson-speech-services-cartridge-for-ibm-cloud-pak-for-data-is-vulnerable-to-cross-site-scripting-in-jquery-cve-2019-11358/</a> <a
https://www.ibm.com/support/pages/node/6610361"
https://www.ibm.com/support/pages/node/6610361</a>