Race condition in IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data - CVE-2024-49353
Published: November 29, 2024
Vulnerability identifier: #VU101053
CSH Severity: Medium
CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2024-49353
CWE-ID: CWE-362
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data does not properly check inputs to resources that are used concurrently. A local user can exploit the race and perform a denial of service (DoS) attack.
Affected software
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
How to mitigate CVE-2024-49353
Install updates from vendor's website.
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data - update to 5.0.3