CVE-2019-4335 - IBM Watson Studio Local 1.2.3 stores key files in the user's home directory which could be obtained by another local user

MEDIUM

IBM Watson Studio Local 1.2.3 stores key files in the user's home directory which could be obtained by another local user

Published Dec 30, 2019

5.5

MEDIUM

CVSS 3.1

EPSS 0.29%

IBM Watson Studio Local 1.2.3 stores key files in the user's home directory which could be obtained by another local user. IBM X-Force ID: 161413.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Version	Status	Constraints
1.2.3	affected	-

No remediation recorded yet.

Weaknesses (1)

CWE-522

Insufficiently Protected Credentials

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-13942		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/161413		vdb-entryx_refsource_XFVDB EntryVendor Advisory
https://www.ibm.com/support/pages/node/1146370		x_refsource_CONFIRMPatchVendor Advisory