IBM watsonx.data Pod Communication Restriction Vulnerability

A vulnerability exists in IBM watsonx.data versions 2.2 through 2.3 due to inadequate restrictions on communication between pods. This flaw could enable an attacker to transfer data between pods without any limitations. The issue arises from improper management of inter-pod communication channels, potentially allowing unauthorized data exchanges within the environment.

Impact

Exploitation of this vulnerability could lead to unauthorized data transfer between pods, allowing for potential data leakage or manipulation.

Remediation

Users should upgrade to IBM watsonx.data version 2.3.1 or the version available on CPD 5.3.1. Installation or upgrade instructions can be found in the IBM watsonx.data documentation for software version 5.3.x.