CVE-2024-35151 - IBM OpenPages information disclosure

Back Back to CVE browser

MEDIUM

IBM OpenPages information disclosure

Published Aug 22, 2024

6.5

MEDIUM

CVSS 3.1

EPSS 0.44%

Description

IBM OpenPages with Watson 8.3 and 9.0 could allow authenticated users access to sensitive information through improper authorization controls on APIs.

Affected products

Vendor IBM Product OpenPages with Watson Default
unaffected
- Version
  8.3, 9.0
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

IBM

OpenPages with Watson

unaffected

Version	Status	Constraints
8.3, 9.0	affected	-

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-288

CWE-306

Missing Authentication

References (2)

https://exchange.xforce.ibmcloud.com/vulnerabilities/292638
VDB Entry
https://www.ibm.com/support/pages/node/7165959
vendor-advisoryVendor Advisory

Link	Providers	Tags
https://exchange.xforce.ibmcloud.com/vulnerabilities/292638		VDB Entry
https://www.ibm.com/support/pages/node/7165959		vendor-advisoryVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner ibm

Published Aug 22, 2024

Updated Aug 22, 2024

Reserved May 9, 2024

Link CVE-2024-35151

CISA Vulnrichment

Updated Aug 22, 2024

NVD

Status Analyzed

Modified Jun 17, 2026

Link CVE-2024-35151

Red Hat

Severity n/a

Public date n/a

Links CVE-2024-35151