Cloud Pak For Data vulnerabilities
7 known vulnerabilities in Cloud Pak For Data from IBM. 7 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.8 High severity
Cloud Pak for Data: Improper Neutralization of Special Elements used in an OS Command
IBM Cloud Pak for Data 5.1.2 could allow an authenticated user to execute arbitrary commands with elevated privileges on the system due to improper validation of user supplied input.
- 7.5 High severity
Cloud Pak for Data: Improper Limitation of a Pathname to a Restricted Directory
IBM Cloud Pak for Data 5.1.2 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system.
- 7.5 High severity
Planning Analytics Cartridge for Cloud Pak for…: Improper Authentication
IBM Planning Analytics Cartridge for Cloud Pak for Data 4.0 connects to a CouchDB server. An attacker can exploit an insecure password policy to the CouchDB server and collect sensitive information from the database. IBM X-Force ID: 247905.
- 7.5 High severity
Planning Analytics Cartridge for Cloud Pak for…: Insertion of Sensitive Information into Log File
Planning Analytics Cartridge for Cloud Pak for Data 4.0 exposes sensitive information in logs which could lead an attacker to exploit this vulnerability to conduct further attacks. IBM X-Force ID: 247896.
- 7.5 High severity
Sterling Connect:Express for UNIX: Insertion of Sensitive Information into Log File
Planning Analytics Cartridge for Cloud Pak for Data 4.0 exposes sensitive information in logs which could lead an attacker to exploit this vulnerability to conduct further attacks. IBM X-Force ID: 247896.
- 7.5 High severity
Watson CP4D Data Stores: Allocation of Resources Without Limits or Throttling
IBM Watson CP4D Data Stores 4.6.0 does not properly allocate resources without limits or throttling which could allow a remote attacker with information specific to the system to cause a denial of service. IBM X-Force ID: 248924.
- 7.2 High severity
Cloud Pak for Data: Unrestricted Upload of File with Dangerous Type
IBM Cloud Pak for Data 4.5 and 4.6 could allow a privileged user to upload malicious files of dangerous types that can be automatically processed within the product's environment. IBM X-Force ID: 232034.