Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2023-30444

IBM Watson Machine Learning on Cloud Pak for Data server-side request forgery

Description

IBM Watson Machine Learning on Cloud Pak for Data 4.0 and 4.5 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 253350.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

IBM Watson Machine Learning on Cloud Pak for Data

Default version status: unaffected

  • 4.0, 4.5affected

References