VULNERABILITY INTELLIGENCE

CVE-2024-35160

CVSS score4.3 MEDIUM
EPSS probability0.36%
CISA KEVNot currently listed
Published2024-11-23
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Description

IBM Watson Query on Cloud Pak for Data 1.8, 2.0, 2.1, 2.2 and IBM Db2 Big SQL on Cloud Pak for Data 7.3, 7.4, 7.5, and 7.6 could allow an authenticated user to obtain sensitive information due to insufficient session expiration.

Weakness classification

  • psirt@us.ibm.com: CWE-613

Primary references