CVE-2021-20486

IBM Cloud Pak for Data 3.0 could allow an authenticated user to obtain sensitive information when installed with additional plugins. IBM X-Force ID: 197668...

CVE-2021-20486

CVE-2021-20486 affects IBM Cloud Pak for Data 3.0 (CPD 3.0) and can allow an authenticated user to obtain sensitive information when CPD is installed with certain plugins (notably with Watson Knowledge Catalog/Data Virtualization add-ons). The vulnerability path is information disclosure due to m...

Security Bulletin: Data protection rules and policies are not enforced on virtualized objects

Summary This problem is applicable for IBM Cloud Pak for Data 3.0.1 environments that have both Data Virtualization and Watson Knowledge Catalog add-ons. This problem is relevant only when using Data Virtualization configured for Watson Knowledge Catalog data policy enforcement. The "Policy...