CVE-2024-22341: IBM Watson Query on Cloud Pak for Data information disclosure
IBM Watson Query on Cloud Pak for Data 4.0.0 through 4.0.9, 4.5.0 through 4.5.3, 4.6.0 through 4.6.6, 4.7.0 through 4.7.4, and 4.8.0 through 4.8.7 could allow unauthorized data access from a remote data source object due to improper privilege management.
Other sources
IBM Watson Query on Cloud Pak for Data could allow unauthorized data access from a remote data source object due to improper privilege management.
— IBM
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-22341?
CVE-2024-22341 is considered a high-severity vulnerability due to the potential for unauthorized data access.
How do I fix CVE-2024-22341?
To fix CVE-2024-22341, update to a patched version of IBM Watson Query or IBM Data Virtualization on Cloud Pak for Data as specified in the vendor's security advisories.
What versions are affected by CVE-2024-22341?
CVE-2024-22341 affects versions of IBM Watson Query on Cloud Pak for Data from 4.0.0 through 4.8.7 and IBM Data Virtualization on Cloud Pak for Data from 1.7 through 3.0.
What type of data is at risk due to CVE-2024-22341?
CVE-2024-22341 exposes risks of unauthorized access to data from remote data source objects.
Who can exploit CVE-2024-22341?
CVE-2024-22341 can be exploited by remote attackers who improperly gain access due to privilege management issues.