CVE-2023-27540

2023-07-1016:15:49

CWE-770

[email protected]

web.nvd.nist.gov

ibm

watson

cp4d

data stores

4.6.0

resource allocation

vulnerability

remote attacker

denial of service

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

6.4

Confidence

High

EPSS

0.001

Percentile

35.8%

JSON

IBM Watson CP4D Data Stores 4.6.0 does not properly allocate resources without limits or throttling which could allow a remote attacker with information specific to the system to cause a denial of service. IBM X-Force ID: 248924.

Affected configurations

Nvd

Node

ibmcloud_pak_for_dataMatch4.6.0

ibmwatson_cp4d_data_storesMatch-

AND

redhatopenshiftMatch-

VendorProductVersionCPE
ibmcloud_pak_for_data4.6.0cpe:2.3:a:ibm:cloud_pak_for_data:4.6.0:*:*:*:*:*:*:*
ibmwatson_cp4d_data_stores-cpe:2.3:a:ibm:watson_cp4d_data_stores:-:*:*:*:*:*:*:*
redhatopenshift-cpe:2.3:a:redhat:openshift:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	cloud_pak_for_data	4.6.0	cpe:2.3:a:ibm:cloud_pak_for_data:4.6.0:::::::*
ibm	watson_cp4d_data_stores	-	cpe:2.3:a:ibm:watson_cp4d_data_stores:-:::::::*
redhat	openshift	-	cpe:2.3:a:redhat:openshift:-:::::::*