CVE-2024-35160

Description

IBM Watson Query on Cloud Pak for Data 1.8, 2.0, 2.1, 2.2 and IBM Db2 Big SQL on Cloud Pak for Data 7.3, 7.4, 7.5, and 7.6 could allow an authenticated user to obtain sensitive information due to insufficient session expiration.

Reserved 2024-05-09 | Published 2024-11-23 | Updated 2024-11-24 | Assigner ibm

Problem types

CWE-613 Insufficient Session Expiration

Product status

Default status
unaffected

1.8, 2.0, 2.1, 2.2
affected

Default status
unaffected

7.3, 7.4, 7.5, 7.6
affected

References

www.ibm.com/support/pages/node/7168703 vendor-advisory

www.ibm.com/support/pages/node/7176947 vendor-advisory

cve.org (CVE-2024-35160)

nvd.nist.gov (CVE-2024-35160)

Download JSON