PT-2025-28657 · Ibm · Ibm Openpages With Watson

Published 2025-07-08 · Updated 2025-07-09 · CVE-2025-27369

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions: IBM OpenPages with Watson versions 8.3 through 9.0

Description: The issue concerns information disclosure of sensitive information due to weaker than expected security for certain REST endpoints used for administration. An authenticated user can obtain information about system configuration and internal state intended only for system administrators.

Recommendations: For IBM OpenPages with Watson versions 8.3 through 9.0, consider restricting access to the affected REST endpoints to minimize the risk of exploitation. As a temporary workaround, limit the privileges of authenticated users to prevent them from accessing sensitive system configuration and internal state information.

Fix

Weakness Enumeration

CWE-497

Related Identifiers

BDU:2025-09719

CVE-2025-27369

Affected Products

Ibm Openpages With Watson

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-27369 · Security Note
• https://osv.dev/vulnerability/CVE-2025-27369 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-09719 · Security Note
• https://twitter.com/CVEnew/status/1942958424100119015 · Twitter Post
• https://ibm.com/support/pages/node/7239155 · Vendor Advisory, Patch