CVE-2024-35160: medium-severity vulnerability in IBM Db2 Big SQL on Cloud Pak for Data
IBM Watson Query on Cloud Pak for Data and IBM Db2 Big SQL on Cloud Pak for Data information disclosure
Published · Updated
Follow this CVE+ Monitor Db2 Big SQL on Cloud Pak for Data+ Monitor Watson Query for Cloud Pak for Data
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 4.3epss 0.4%
IBM Watson Query on Cloud Pak for Data 1.8, 2.0, 2.1, 2.2 and IBM Db2 Big SQL on Cloud Pak for Data 7.3, 7.4, 7.5, and 7.6 could allow an authenticated user to obtain sensitive information due to insufficient session expiration.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Related CVEs — IBM Db2 Big SQL on Cloud Pak for Data
In the same product, most dangerous first.