IBM watsonx.data intelligence 5.2.2, 5.3.0, 5.3.1, 5.3.1 through patch-1 transmits data in clear text that could allow an attacker to obtain sensitive information using man in the middle techniques.
Description: CWE-319 Cleartext Transmission of Sensitive Information
Metrics
Version
Base score
Base severity
Vector
3.1
5.9
MEDIUM
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Version:3.1
Base score:5.9
Base severity: MEDIUM
Vector:
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Metrics Other Info
Impacts
CAPEC ID
Description
Solutions
Affected ProductFixed VersionsInstructionsIBM watsonx.data intelligence 5.2.2 - 5.3.1-patch15.3.1-patch3 https://www.ibm.com/docs/en/watsonx/wdi/2.3.x?topic=new-watsonxdata-intelligence
IBM strongly advises upgrading as soon as possible