Skip to content
OpenAdvisories
High · 7.1 CVE-2023-30444 EUVD-2023-34862GHSA-9m4j-8w9j-vwfv

IBM Watson Machine Learning on Cloud Pak for Data server-side request forgery

Published Apr 27, 2023 · Updated Jan 30, 2025 · Assigned by ibm

Vendor: IBM Product: Watson Machine Learning on Cloud Pak for Data

Description

IBM Watson Machine Learning on Cloud Pak for Data 4.0 and 4.5 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 253350.

Affected products

VendorProductAffectedFixed
IBM Watson Machine Learning on Cloud Pak for Data 4.0, 4.5 —

References