IBM watsonx.data Denial-of-Service Vulnerability Due to Improper Resource Allocation

A denial-of-service vulnerability has been identified in IBM watsonx.data versions 2.2 through 2.2.1. This issue allows an authenticated user to disrupt service by causing ingestion pods to improperly allocate resources without limits.

Impact

Exploitation of this vulnerability can lead to a denial-of-service condition, causing ingestion pods to misuse resources and potentially disrupt normal operations.

Remediation

Users can upgrade to IBM watsonx.data version 2.2.2 or the version available on CPD 5.2.2. Installation or upgrade instructions are available in the IBM watsonx.data documentation.