CVE-2023-27291 MEDIUM

CVE-2023-27291: IBM Watson CP4D Data Stores information disclosure

Vendor Ibm
Product Watson CP4D Data Stores
Weakness CWE-319 · Cleartext transmission
Published March 3, 2024
Last update September 19, 2024
View on NVD All CVEs

CVSS base score

4.5/10
Attack vector Network
Attack complexity Low
Privileges required High
User interaction Required
Confidentiality High
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N

What the vulnerability does

01Description

IBM Watson CP4D Data Stores 4.6.0, 4.6.1, 4.6.2, and 4.6.3 does not encrypt sensitive or critical information before storage or transmission which could allow an attacker to obtain sensitive information. IBM X-Force ID: 248740.

Key dates

02Disclosure timeline

March 3, 2024 CVE published
September 19, 2024 Record updated