PT-2019-17037 · Ibm · Ibm Watson Studio Local

Published 2019-12-30 · Updated 2020-08-24 · CVE-2019-4335

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Watson Studio Local version 1.2.3

Description The issue concerns the storage of key files in the user's home directory, potentially allowing another local user to obtain them.

Recommendations For IBM Watson Studio Local version 1.2.3, consider restricting access to the user's home directory to minimize the risk of key file exposure. As a temporary workaround, limit local user privileges to prevent unauthorized access to sensitive files.

Fix

Insufficiently Protected Credentials

Weakness Enumeration

CWE-522

Related Identifiers

CVE-2019-4335

Affected Products

Ibm Watson Studio Local

References · 4

• https://ibm.com/support/pages/node/1146370 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-4335 · Security Note
• https://osv.dev/vulnerability/CVE-2019-4335 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/161413 · Vendor Advisory