Description
IBM Watson Query on Cloud Pak for Data 1.8, 2.0, 2.1, 2.2 and IBM Db2 Big SQL on Cloud Pak for Data 7.3, 7.4, 7.5, and 7.6 could allow an authenticated user to obtain sensitive information due to insufficient session expiration.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| IBM | Watson Query for Cloud Pak for Data | 1.8, 2.0, 2.1, 2.2 | — |
| IBM | Db2 Big SQL on Cloud Pak for Data | 7.3, 7.4, 7.5, 7.6 | — |
Advisories 1
- WID-SEC-2024-3536 IBM DB2: Schwachstelle ermöglicht Offenlegung von Informationen BSI CERT-Bund (WID) · Nov 24, 2024
References
- https://www.ibm.com/support/pages/node/7168703 vendor-advisory
- https://www.ibm.com/support/pages/node/7176947 vendor-advisory