CVE-2022-22410: High severity ibm watson query on cloud pak for data vulnerability

Published Mar 30, 2022

Updated

IBM Watson Query could allow an authenticated user to obtain sensitive information that would allow them to examine or alter system configurations or data sources connected to the service.

Other sources

IBM Watson Query with Cloud Pak for Data as a Service could allow an authenticated user to obtain sensitive information that would allow them to examine or alter system configurations or data sources connected to the service. IBM X-Force ID: 222763.

Affected Software

2 affected components

IBM Watson Query with Cloud Pak for Data as a Service<=All instances on or after December 1, 2021

IBM Watson Query Cloud Pak For Data As A Service>=2021-12-01

Event History

Mar 30, 2022

CVE Published

via IBM·12:00 AM

Apr 6, 2022

CVE Published

via MITRE·03:40 PM

Data Sourced

via MITRE·03:40 PM

DescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

IBM-6569235

Frequently Asked Questions

What is the severity of CVE-2022-22410?

CVE-2022-22410 is considered a critical vulnerability due to its potential to expose sensitive information and allow unauthorized access to system configurations.

How do I fix CVE-2022-22410?

To remediate CVE-2022-22410, it is recommended to upgrade to the latest version of IBM Watson Query with Cloud Pak for Data as a Service, which addresses this vulnerability.

Who is affected by CVE-2022-22410?

CVE-2022-22410 affects all instances of IBM Watson Query with Cloud Pak for Data as a Service from December 1, 2021, onwards.

What information can be exposed by CVE-2022-22410?

CVE-2022-22410 could allow an authenticated user to access sensitive information related to system configurations and connected data sources.

Is CVE-2022-22410 being actively exploited?

While there is no public indication of active exploitation of CVE-2022-22410, it is crucial to apply patches to mitigate risks.