PT-2019-17037 · Ibm · Ibm Watson Studio Local

Publicado 2019-12-30 · Atualizado 2020-08-24 · CVE-2019-4335

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Watson Studio Local version 1.2.3

Description The issue concerns the storage of key files in the user's home directory, potentially allowing another local user to obtain them.

Recommendations For IBM Watson Studio Local version 1.2.3, consider restricting access to the user's home directory to minimize the risk of key file exposure. As a temporary workaround, limit local user privileges to prevent unauthorized access to sensitive files.

Correção

Insufficiently Protected Credentials

Enumeração de Fraquezas

CWE-522

Identificadores relacionados

CVE-2019-4335

Produtos afetados

Ibm Watson Studio Local

Referências · 4

• https://ibm.com/support/pages/node/1146370 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-4335 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-4335 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/161413 · Aviso do Fabricante