CVE-2023-27545 MEDIUM

CVE-2023-27545: IBM Watson CloudPak for Data Data Stores information disclosure

Vendor Ibm
Product Watson CloudPak for Data Data Stores
Weakness CWE-525
Published February 29, 2024
Last update August 2, 2024

CVSS base score

4.0/10
Attack vector Local
Attack complexity Low
Privileges required None
User interaction None
Confidentiality Low
Integrity None

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

What the vulnerability does

01Description

IBM Watson CloudPak for Data Data Stores information disclosure 4.6.0 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 248947.

Key dates

02Disclosure timeline

February 29, 2024 CVE published
August 2, 2024 Record updated