IBM Watson Studio Local Cross-Site Request Forgery Vulnerability

IBM Watson Studio Local is a suite of collaborative data processing solutions from International Business Machines IBM. The product includes features such as data analysis, data visualization, data cleansing and streaming data extraction. A cross-site request forgery vulnerability exists in IBM...

CVE-2024-49340

IBM Watson Studio Local 1.2.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts...

CVE-2024-49340

IBM Watson Studio Local 1.2.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts...

CVE-2024-49340: Cross-Site Request Forgery (CSRF)

IBM Watson Studio Local 1.2.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts...

Security Bulletin: Cross Site Scripting Vulnerability Affects IBM Watson Studio Local

Summary Cross Site Scripting Vulnerability Affects IBM Watson Studio Local Jupyter notebooks. This vulnerability has been addressed. Vulnerability Details CVEID: CVE-2024-49340 DESCRIPTION: IBM Watson Studio Local is vulnerable to cross-site request forgery which could allow an attacker to execut...

PT-2024-33479 · Ibm · Ibm Watson Studio Local

Name of the Vulnerable Software and Affected Versions: IBM Watson Studio Local version 1.2.3 Description: The issue is related to a cross-site request forgery vulnerability, which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts...

IBM Watson Studio Local 跨站请求伪造漏洞

IBM Watson Studio Local is a suite of collaborative data processing solutions from International Business Machines IBM. The product includes features such as data analysis, data visualization, data cleansing and streaming data extraction. A cross-site request forgery vulnerability exists in IBM...

CVE-2019-4335

IBM Watson Studio Local 1.2.3 stores key files in the user's home directory which could be obtained by another local user. IBM X-Force ID: 161413...

PT-2019-9377

Name of the Vulnerable Software and Affected Versions IBM Watson Studio Local version 1.2.3 Description The issue could disclose sensitive information over the network, which an attacker could use in further attacks against the system. Recommendations For IBM Watson Studio Local version 1.2.3, at...

CVE-2018-1682: Exposure of Sensitive Information to an Unauthorized Actor

IBM Watson Studio Local 1.2.3 could disclose sensitive information over the network that an attacked could use in further attacks against the system. IBM X-Force ID: 145238...

PT-2019-17037

Name of the Vulnerable Software and Affected Versions IBM Watson Studio Local version 1.2.3 Description The issue concerns the storage of key files in the user's home directory, potentially allowing another local user to obtain them. Recommendations For IBM Watson Studio Local version 1.2.3,...

CVE-2019-4335: Insufficiently Protected Credentials

IBM Watson Studio Local 1.2.3 stores key files in the user's home directory which could be obtained by another local user. IBM X-Force ID: 161413...

IBM Watson Studio Local Information Disclosure Vulnerability

IBM Watson Studio Local is a suite of collaborative data processing solutions from IBM, USA. The product includes features such as data analysis, data visualization, data cleansing and streaming data extraction. A security vulnerability exists in IBM Watson Studio Loca version 1.2.3. An attacker...

IBM Watson Studio Local Local Secret Key Storage Vulnerability

IBM Watson Studio Local is a suite of collaborative data processing solutions from IBM, USA. The product includes features such as data analysis, data visualization, data cleansing and streaming data extraction. A security vulnerability exists in IBM Watson Studio Local version 1.2.3, which...

Security Bulletin: Multiple Vulnerabilities in libCurl affects IBM Watson Studio Local

Summary Multiple Vulnerabilities in libCurl affects IBM Watson Studio Local Vulnerability Details CVEID: CVE-2019-5482 DESCRIPTION: Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3. CVSS Base score: 6.3 CVSS Temporal Score: See:...

Security Bulletin: Multiple Vulnerabilities in OpenSSL affects IBM Watson Studio Local

Summary Multiple vulnerabilities in OpenSSL affects IBM Watson Studio Local Vulnerability Details CVEID: CVE-2019-1563 DESCRIPTION: In situations where an attacker receives automated notification of the success or failure of a decryption attempt an attacker, after sending a very large number of...

Security Bulletin: Internal SSL Communication Vulerability in Watson Studio Local (PSIRT-ADV0011800)

Summary Watson Studio local removed support of older SSL protocol Vulnerability Details Third Party Entry: PSIRT-ADV0011800 DESCRIPTION: CVSS Base score: 7.5 CVSS Vector: CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products and Versions Affected Products| Versions ---|--- IBM Watson...

Security Bulletin: JWT Token Check Vulnerability in Watson Studio Local

Summary An error in how JWT token signature was checked has been addressed. This issue was leading to invalid Jupyter Notebook access. Vulnerability Details Third Party Entry: PSIRT-ADV0010959 DESCRIPTION: CVSS Base score: 5.9 CVSS Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N Affected...

Security Bulletin: Input Validation Vulnerability in Watson Studio Local

Summary A lack of input validation offered an attack vector in several API calls. This vulnerability is addressed Vulnerability Details Third Party Entry: PSIRT-ADV0011811 DESCRIPTION: CVSS Base score: 8.8 CVSS Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products and Versions...

Security Bulletin: Network Vulnerability In Watson Studio Studio Local (CVE-2018-1682)

Summary A network port that could lead to information leakage is closed. Vulnerability Details CVEID: CVE-2018-1682 DESCRIPTION: IBM Data Science Experience Local could disclose sensitive information over the network that an attacked could use in further attacks against the system. CVSS Base scor...