Information disclosure in Watson Query on Cloud Pak for Data - CVE-2024-37526

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU98135

Information disclosure in Watson Query on Cloud Pak for Data - CVE-2024-37526

Published: October 8, 2024


Vulnerability identifier: #VU98135
CSH Severity: Low
CVSS v4: 7.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2024-37526
CWE-ID: CWE-200
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote user to gain access to potentially sensitive information.

The vulnerability exists due to an improper data protection mechanism. A remote user can gain unauthorized access to sensitive information on the system.


Affected software

Watson Query on Cloud Pak for Data
Data Virtualization (DV) on Cloud Pak for Data (CPD)

How to mitigate CVE-2024-37526

Install updates from vendor's website.

Data Virtualization (DV) on Cloud Pak for Data (CPD) - addressed in versions 4.8.6, 5.0.1

External References

Related Security Bulletins