IBM Lakehouse Information Disclosure Vulnerability in watsonx.data Component Version 2.2
Vulnerability
An information disclosure vulnerability has been identified in IBM Lakehouse, specifically in the watsonx.data component version 2.2. This vulnerability could allow an authenticated user to access sensitive server component version details, potentially facilitating further attacks against the system.
Impact
Exploitation of this vulnerability could lead to unauthorized access to sensitive server component version information, which could be used to plan and execute additional attacks against the system.
Remediation
Users can upgrade to IBM watsonx.data version 2.2.1 or version 2.2 on CPD 5.2.1. Installation or upgrade instructions are available in the IBM watsonx documentation.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.