{"id":"CVE-2024-49353","state":"PUBLISHED","title":"IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data denial of service","description":"IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data 4.0.0 through 5.0.2 does not properly check inputs to resources that are used concurrently, which might lead to unexpected states, possibly resulting in a crash.","publishedAt":"2024-11-26T03:23:32.676Z","updatedAt":"2024-11-26T15:41:18.160Z","severity":{"score":7.5,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","source":"ibm"},"assigner":"ibm","products":["IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data"],"affected":[{"vendor":"IBM","product":"Watson Speech Services Cartridge for IBM Cloud Pak for Data","defaultStatus":"unaffected","versions":[{"version":"4.0.0","status":"affected","lessThanOrEqual":"5.0.2","versionType":"semver"}]}],"references":["https://www.ibm.com/support/pages/node/7177065"],"weaknesses":["CWE-362"],"ingestedAt":"2026-10-29T20:07:56.516Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/49xxx/CVE-2024-49353.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2024-49353","state":"PUBLISHED","datePublished":"2024-11-26T03:23:32.676Z","dateUpdated":"2024-11-26T15:41:18.160Z","assignerShortName":"ibm","assignerOrgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","dateReserved":"2024-10-14T12:05:24.915Z"},"containers":{"cna":{"title":"IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data denial of service","descriptions":[{"lang":"en","value":"IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data 4.0.0 through 5.0.2 does not properly check inputs to resources that are used concurrently, which might lead to unexpected states, possibly resulting in a crash."}],"affected":[{"vendor":"IBM","product":"Watson Speech Services Cartridge for IBM Cloud Pak for Data","defaultStatus":"unaffected","versions":[{"version":"4.0.0","status":"affected","lessThanOrEqual":"5.0.2","versionType":"semver"}]}],"references":[{"url":"https://www.ibm.com/support/pages/node/7177065"}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-362","description":"CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"ibm","orgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","dateUpdated":"2024-11-26T03:23:32.676Z"},"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.2.0"}},"adp":[{"title":"CISA ADP Vulnrichment","affected":[{"vendor":"ibm","product":"watson_speech_services_cartridge_on_cloud_pak_for_data","defaultStatus":"unknown","versions":[{"version":"4.0.0","status":"affected","lessThanOrEqual":"5.0.2","versionType":"custom"}],"cpes":["cpe:2.3:a:ibm:watson_speech_services_cartridge_on_cloud_pak_for_data:*:*:*:*:*:*:*:*"]}],"metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-11-26T15:38:55.082163Z","id":"CVE-2024-49353","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-11-26T15:41:18.160Z"}}]}}}