CVEvulnerability
CVE-2024-35160
6.5 MEDIUM
Official page ↗
- Status
- Analyzed
- Published
- 2024-11-23
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
- CVSS 3.1 ([email protected])
- 6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- Weaknesses
- CWE-613
Description
IBM Watson Query on Cloud Pak for Data 1.8, 2.0, 2.1, 2.2 and IBM Db2 Big SQL on Cloud Pak for Data 7.3, 7.4, 7.5, and 7.6 could allow an authenticated user to obtain sensitive information due to insufficient session expiration.
Affected configurations
• ibm big sql 7.3
• ibm big sql 7.4
• ibm big sql 7.5
• ibm big sql 7.6
• ibm watson query with cloud pak for data 1.8
• ibm watson query with cloud pak for data 2.0
• ibm watson query with cloud pak for data 2.1
• ibm watson query with cloud pak for data 2.2
Related
Weakness · not in database (1)
References
- https://www.ibm.com/support/pages/node/7168703 Vendor Advisory
- https://www.ibm.com/support/pages/node/7176947 Vendor Advisory