CVE-2024-37526

EUVD-2024-36576 · Published Jan 27, 2025

IBM Watson Query on Cloud Pak for Data (IBM Data Virtualization 1.8, 2.0, 2.1, 2.2, and 3.0.0) could allow an authenticated user to obtain sensitive information from objects published using Watson Query due to an improper data protection mechanism.

Technologies

Ibm Watson Query With Cloud Pak For DataIbm Data Virtualization On Cloud Pak For Data

Weaknesses

CWE-497

CVSS scores

v3.16.5CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

ReconImpact

Initial Access Discovery

T1190Exploit Public-Facing Application T1614System Location Discovery

References

https://www.ibm.com/support/pages/node/7173774

Potentially impacted assets

See if this affects your attack surface