CVE-2024-49355

IBM OpenPages with Watson 8.3 and 9.0 may write improperly neutralized data to server log files when the tracing is enabled per the System Tracing feature.
References
Link Resource
https://www.ibm.com/support/pages/node/7183541 Vendor Advisory
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:a:ibm:openpages_with_watson:*:*:*:*:*:*:*:*
cpe:2.3:a:ibm:openpages_with_watson:*:*:*:*:*:*:*:*
OR cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

History

11 Mar 2025, 14:51

Type Values Removed Values Added
CPE cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
cpe:2.3:a:ibm:openpages_with_watson:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : 5.3
v2 : unknown
v3 : 6.5
First Time Ibm openpages With Watson
Linux
Microsoft windows
Microsoft
Linux linux Kernel
Ibm
CWE CWE-116
References () https://www.ibm.com/support/pages/node/7183541 - () https://www.ibm.com/support/pages/node/7183541 - Vendor Advisory

20 Feb 2025, 04:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-02-20 04:15

Updated : 2025-03-11 14:51


NVD link : CVE-2024-49355

Mitre link : CVE-2024-49355


JSON object : View

Products Affected

linux

  • linux_kernel

microsoft

  • windows

ibm

  • openpages_with_watson
CWE
CWE-116

Improper Encoding or Escaping of Output

CWE-117

Improper Output Neutralization for Logs