What is the severity of CVE-2022-22410?

CVE-2022-22410 is considered a critical vulnerability due to its potential to expose sensitive information and allow unauthorized access to system configurations.

How do I fix CVE-2022-22410?

To remediate CVE-2022-22410, it is recommended to upgrade to the latest version of IBM Watson Query with Cloud Pak for Data as a Service, which addresses this vulnerability.

Who is affected by CVE-2022-22410?

CVE-2022-22410 affects all instances of IBM Watson Query with Cloud Pak for Data as a Service from December 1, 2021, onwards.

What information can be exposed by CVE-2022-22410?

CVE-2022-22410 could allow an authenticated user to access sensitive information related to system configurations and connected data sources.

Is CVE-2022-22410 being actively exploited?

While there is no public indication of active exploitation of CVE-2022-22410, it is crucial to apply patches to mitigate risks.

Vulnerability/
CVE-2022-22410

high

7.2

30/3/2022

6/4/2022

17/9/2024

CVE-2022-22410

First published: Wed Mar 30 2022(Updated: )

IBM Watson Query could allow an authenticated user to obtain sensitive information that would allow them to examine or alter system configurations or data sources connected to the service.

Credit: psirt@us.ibm.com

Affected Software	Affected Version	How to fix
IBM Watson Query on Cloud Pak for Data	<=All instances on or after December 1, 2021
IBM Watson Query	>=2021-12-01

Never miss a vulnerability like this again

Reference Links

Parent vulnerabilities

(Appears in the following advisories)

IBM-6569235

Frequently Asked Questions

What is the severity of CVE-2022-22410?
CVE-2022-22410 is considered a critical vulnerability due to its potential to expose sensitive information and allow unauthorized access to system configurations.
How do I fix CVE-2022-22410?
To remediate CVE-2022-22410, it is recommended to upgrade to the latest version of IBM Watson Query with Cloud Pak for Data as a Service, which addresses this vulnerability.
Who is affected by CVE-2022-22410?
CVE-2022-22410 affects all instances of IBM Watson Query with Cloud Pak for Data as a Service from December 1, 2021, onwards.
What information can be exposed by CVE-2022-22410?
CVE-2022-22410 could allow an authenticated user to access sensitive information related to system configurations and connected data sources.
Is CVE-2022-22410 being actively exploited?
While there is no public indication of active exploitation of CVE-2022-22410, it is crucial to apply patches to mitigate risks.

agent/type
agent/references
agent/first-publish-date
agent/severity
agent/author
agent/description
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/event
agent/trending
agent/source
collector/ibm-support
source/IBM
agent/software-canonical-lookup
agent/software-canonical-lookup-request
agent/tags
agent/softwarecombine
collector/nvd-index
vendor/ibm
canonical/ibm watson query on cloud pak for data
version/ibm watson query on cloud pak for data/all instances on or after december 1, 2021
canonical/ibm watson query
version/ibm watson query/2021-12-01

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.