CVE-2023-27291

IBM Watson CP4D Data Stores (CP4D Data Stores) versions 4.6.0–4.6.3 do not encrypt sensitive or critical information before storage or transmission, enabling potential exposure of data. The CVE-2023-27291 issue is documented in IBM Security Bulletin and corroborated by multiple feeds (NVD, Red Ha...

CVE-2023-28512

Summary : IBM Watson CloudPak for Data Data Stores (CP4D Data Stores) versions 4.6.0–4.6.2 contain a vulnerability due to improper input validation . An attacker with system-specific knowledge could manipulate data, impacting integrity. The issue is reported with a CVSS v3.1 base score of 5.9 (Me...

CVE-2023-26282

CVE-2023-26282 affects IBM Watson CP4D Data Stores versions 4.6.0–4.6.3. The root cause is a security flaw that could allow a user with physical access and system-specific knowledge to modify files or data on the system. Impact, as described in sources, is the possibility to modify files/data wit...

CVE-2023-40694

CVE-2023-40694 affects IBM Watson CP4D Data Stores (versions 4.0.0 through 4.8.4). The issue stems from storing potentially sensitive information in log files that could be read by a local user, constituting an information-disclosure vulnerability. Red Hat and IBM bulletin entries corroborate the...

CVE-2023-27540

CVE-2023-27540 affects IBM Watson CP4D Data Stores 4.6.0 and is caused by improper allocation of resources without limits or throttling, enabling a remote attacker with system-specific information to cause a denial of service. IBM’s bulletin assigns a CVSS v3.1 base score of 5.9 (MEDIUM) and cite...