Skip to content
OpenAdvisories
Medium · 5.3 CVE-2024-22341 EUVD-2024-19902GHSA-c9vm-r7mj-wm49

IBM Watson Query on Cloud Pak for Data information disclosure

Published Feb 22, 2025 · Updated Sep 30, 2025 · Assigned by ibm

Vendor: IBM Product: Watson Query on Cloud Pak for Data

Description

IBM Watson Query on Cloud Pak for Data 4.0.0 through 4.0.9, 4.5.0 through 4.5.3, 4.6.0 through 4.6.6, 4.7.0 through 4.7.4, and 4.8.0 through 4.8.7 could allow unauthorized data access from a remote data source object due to improper privilege management.

Affected products

VendorProductAffectedFixed
IBM Watson Query on Cloud Pak for Data 4.8.0 – ≤ 4.8.7, 4.7.0 – ≤ 4.7.4, 4.6.0 – ≤ 4.6.6, 4.5.0 – ≤ 4.5.3, 4.0.0 – ≤ 4.0.9 —

References