description: IBM Watson Query with Cloud Pak for Data as a Service could allow an authenticated user to obtain sensitive information that would allow them to examine or alter system configurations or data sources connected to the service. IBM X-Force ID: 222763.
problem types: Gain Privileges
affected:
{
product: Watson Query
vendor: IBM
versions:
status: affected, version: All instances on or after December 1, 2021
}
metrics:
cvssV3_0: [
attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 3.9
baseSeverity: LOW
confidentialityImpact: LOW
exploitCodeMaturity: UNPROVEN
integrityImpact: LOW
privilegesRequired: HIGH
remediationLevel: OFFICIAL_FIX
reportConfidence: CONFIRMED
scope: UNCHANGED
temporalScore: 3.4
temporalSeverity: LOW
userInteraction: REQUIRED
vectorString: CVSS:3.0/PR:H/UI:R/A:L/AC:H/S:U/C:L/I:L/AV:N/E:U/RC:C/RL:O
version: 3.0
]