CVE-2023-27291: IBM Watson CP4D Data Stores information disclosure

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-03-03 · updated 2026-06-17
Weakness: CWE-319

Description

IBM Watson CP4D Data Stores 4.6.0, 4.6.1, 4.6.2, and 4.6.3 does not encrypt sensitive or critical information before storage or transmission which could allow an attacker to obtain sensitive information. IBM X-Force ID: 248740.

Affected products

IBM Watson CP4D Data Stores: 4.6.0, 4.6.1, 4.6.2, 4.6.3

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/248740
https://www.ibm.com/support/pages/node/6965458
https://exchange.xforce.ibmcloud.com/vulnerabilities/248740
https://www.ibm.com/support/pages/node/6965458

Get alerted when CVE-2023-27291 or the next vulnerability affects your stack