Description
IBM watsonx.data 2.2 through 2.3.1 IBM Lakehouse does not properly restrict inbound and outbound connections which could allow an attacker to transfer or modify files without restrictions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| IBM | watsonx.data | 2.2.0 – ≤ 2.3.1 | — |
References
- https://www.ibm.com/support/pages/node/7272498 vendor-advisory patch