{"id":"CVE-2023-27291","state":"PUBLISHED","title":"IBM Watson CP4D Data Stores information disclosure","description":"IBM Watson CP4D Data Stores 4.6.0, 4.6.1, 4.6.2, and 4.6.3 does not encrypt sensitive or critical information before storage or transmission which could allow an attacker to obtain sensitive information.  IBM X-Force ID:  248740.","publishedAt":"2024-03-03T15:39:55.755Z","updatedAt":"2024-09-19T15:09:09.016Z","severity":{"score":4.5,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N","source":"ibm"},"assigner":"ibm","products":["IBM Watson CP4D Data Stores"],"affected":[{"vendor":"IBM","product":"Watson CP4D Data Stores","defaultStatus":"unaffected","versions":[{"version":"4.6.0, 4.6.1, 4.6.2, 4.6.3","status":"affected"}]}],"references":["https://www.ibm.com/support/pages/node/6965458","https://exchange.xforce.ibmcloud.com/vulnerabilities/248740"],"weaknesses":["CWE-319"],"ingestedAt":"2026-10-29T20:05:52.290Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2023/27xxx/CVE-2023-27291.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2023-27291","state":"PUBLISHED","datePublished":"2024-03-03T15:39:55.755Z","dateUpdated":"2024-09-19T15:09:09.016Z","assignerShortName":"ibm","assignerOrgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","dateReserved":"2023-02-27T17:47:22.587Z"},"containers":{"cna":{"title":"IBM Watson CP4D Data Stores information disclosure","descriptions":[{"lang":"en","value":"IBM Watson CP4D Data Stores 4.6.0, 4.6.1, 4.6.2, and 4.6.3 does not encrypt sensitive or critical information before storage or transmission which could allow an attacker to obtain sensitive information.  IBM X-Force ID:  248740."}],"affected":[{"vendor":"IBM","product":"Watson CP4D Data Stores","defaultStatus":"unaffected","versions":[{"version":"4.6.0, 4.6.1, 4.6.2, 4.6.3","status":"affected"}]}],"references":[{"url":"https://www.ibm.com/support/pages/node/6965458","tags":["vendor-advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/248740"}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":4.5,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"HIGH","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-319","description":"CWE-319 Cleartext Transmission of Sensitive Information","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"ibm","orgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","dateUpdated":"2024-09-19T15:09:09.016Z"},"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.1.0-dev"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-07-12T21:06:18.292724Z","id":"CVE-2023-27291","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-07-12T21:06:24.217Z"}},{"title":"CVE Program Container","references":[{"url":"https://www.ibm.com/support/pages/node/6965458","tags":["vendor-advisory","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/248740","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-02T12:09:43.191Z"}}]}}}