CVE-2023-27291: IBM Watson CP4D Data Stores information disclosure
First published: Tue Mar 21 2023(Updated: )
IBM Watson CP4D Data Stores 4.6.0, 4.6.1, 4.6.2, and 4.6.3 does not encrypt sensitive or critical information before storage or transmission which could allow an attacker to obtain sensitive information. IBM X-Force ID: 248740.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM Watson CloudPak for Data Data Stores | <=4.6.0,4.6.1, 4.6.2, 4.6.3 | |
| IBM Watson CP4D Data Stores | =4.6.0 | |
| IBM Watson CP4D Data Stores | =4.6.1 | |
| IBM Watson CP4D Data Stores | =4.6.2 | |
| IBM Watson CP4D Data Stores | =4.6.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- agent/title
- agent/references
- agent/type
- collector/ibm-support
- source/IBM
- agent/software-canonical-lookup
- agent/softwarecombine
- agent/description
- agent/first-publish-date
- agent/author
- agent/severity
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/weakness
- agent/trending
- agent/tags
- collector/nvd-api
- source/NVD
- vendor/ibm
- canonical/ibm watson cloudpak for data data stores
- version/ibm watson cloudpak for data data stores/4.6.0,4.6.1, 4.6.2, 4.6.3
- canonical/ibm watson cp4d data stores
- version/ibm watson cp4d data stores/4.6.0
- version/ibm watson cp4d data stores/4.6.1
- version/ibm watson cp4d data stores/4.6.2
- version/ibm watson cp4d data stores/4.6.3