PT-2025-7413 · Ibm · Ibm Openpages With Watson

Publicado 2025-02-19 · Atualizado 2025-03-11 · CVE-2024-43196

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions IBM OpenPages with Watson versions 8.3 through 9.0

Description The issue allows an authenticated user to manipulate data in the Questionnaires application, enabling them to spoof other users' responses.

Recommendations For versions 8.3 and 9.0, consider restricting access to the Questionnaires application until a patch is available. As a temporary workaround, consider disabling the functionality that allows users to manipulate data in the Questionnaires application. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-296

Identificadores relacionados

BDU:2025-06816

CVE-2024-43196

Produtos afetados

Ibm Openpages With Watson

Referências · 8

• https://ibm.com/support/pages/node/7183541 · Aviso do Fabricante, Correção
• https://osv.dev/vulnerability/CVE-2024-43196 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2024-43196 · Nota de Segurança
• https://t.me/cvenotify/111852 · Publicação no Telegram
• https://t.me/cvenotify/114231 · Publicação no Telegram
• https://bdu.fstec.ru/vul/2025-06816 · Nota de Segurança
• https://t.me/cvedetector/18512 · Publicação no Telegram
• https://twitter.com/CVEnew/status/1892428181300302282 · Publicação no Twitter