IBM Knowledge Catalog Standard Cartridge Log File Information Disclosure Vulnerability

A vulnerability exists in IBM Knowledge Catalog Standard Cartridge versions 5.0.0 through 5.2.1, where potentially sensitive information is stored in log files. This information could be accessed by a local privileged user.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive information contained in log files.

Remediation

Users are advised to upgrade to IBM Knowledge Catalog Standard Cartridge for IBM Cloud Pak for Data version 5.3. The update can be downloaded from the IBM Cloud Pak for Data documentation site.