CVE-2024-35160 — IBM Watson Query on Cloud Pak for Data and IBM Db2 Big SQL on Cloud Pak for Data information disclosure

CVE-2024-35160

IBM Watson Query on Cloud Pak for Data and IBM Db2 Big SQL on Cloud Pak for Data information disclosure PUBLISHED

Description (CNA)

IBM Watson Query on Cloud Pak for Data 1.8, 2.0, 2.1, 2.2 and IBM Db2 Big SQL on Cloud Pak for Data 7.3, 7.4, 7.5, and 7.6 could allow an authenticated user to obtain sensitive information due to insufficient session expiration.

Affected (CNA)

Vendor / product	Versions
IBM / Watson Query for Cloud Pak for Data	affected 1.8, 2.0, 2.1, 2.2
IBM / Db2 Big SQL on Cloud Pak for Data	affected 7.3, 7.4, 7.5, 7.6

CWE

CWE-613

References

https://www.ibm.com/support/pages/node/7168703
https://www.ibm.com/support/pages/node/7176947

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.