PT-2024-26338 · Ibm · Ibm Openpages With Watson

0Xhassan + 1 · Published 2024-08-22 · Updated 2024-08-23 · CVE-2024-35151

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM OpenPages with Watson versions 8.3 through 9.0

Description The issue allows authenticated users to access sensitive information due to improper authorization controls on APIs.

Recommendations For versions 8.3 and 9.0, consider restricting access to sensitive APIs until a patch is available. As a temporary workaround, review and tighten authorization controls on APIs to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authentication

Authentication Bypass Using an Alternate Path or Channel

Weakness Enumeration

CWE-306

CWE-288

Related Identifiers

CVE-2024-35151

Affected Products

Ibm Openpages With Watson

References · 8

• https://ibm.com/support/pages/node/7165959 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-35151 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-35151 · Security Note
• https://twitter.com/CVEnew/status/1826614608666526191 · Twitter Post
• https://t.me/cvedetector/3909 · Telegram Post
• https://t.me/cvenotify/91688 · Telegram Post
• https://exchange.xforce.ibmcloud.com/vulnerabilities/292638 · Note
• https://twitter.com/VulmonFeeds/status/1826602230310469718 · Twitter Post