CVEvulnerability

CVE-2024-49783

6.5 MEDIUM Published 2025-07-08 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2025-07-08
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.3 MEDIUM — CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-329

Description

IBM OpenPages with Watson 8.3 and 9.0 could provide weaker than expected security in storage of encrypted data. If an authenticated remote attacker with access to the database or a local attacker with access to server files could extract the encrypted data, they could exploit this vulnerability to use additional cryptographic methods to possibly extract the encrypted data.

Affected configurations

• ibm openpages with watson (>= 8.3 < 8.3.0.3.1) • ibm openpages with watson (>= 9.0 < 9.0.0.5)

Related

Weakness · CWE (1)

  • CWE-329 Generation of Predictable IV with CBC Mode weakness

References