Security Bulletin: Vulnerabilities in MongoDB affects IBM Watson Studio Local

2019-12-2021:26:28

www.ibm.com

EPSS

0.001

Percentile

44.1%

JSON

Summary

Vulnerabilities in MongoDB affects IBM Watson Studio Local

Vulnerability Details

CVEID:CVE-2019-2386
**DESCRIPTION:**After user deletion in MongoDB Server the improper invalidation of authorization sessions allows an authenticated user’s session to persist and become conflated with new accounts, if those accounts reuse the names of deleted ones. This issue affects: MongoDB Inc. MongoDB Server v4.0 versions prior to 4.0.9; v3.6 versions prior to 3.6.13; v3.4 versions prior to 3.4.22.
CVSS Base score: 7.1
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/164984 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H)

Affected Products and Versions

Affected Product(s)	Version(s)
IBM Watson Studio - Local	1.2.3

Remediation/Fixes

Product	VRMF	Remediation/First Fix
IBM Watson Studio Local	2.1	<https://www.ibm.com/software/passportadvantage/pao_customer.html>
IBM Cloud Pak for Data	2.5	<https://www.ibm.com/software/passportadvantage/pao_customer.html>