CVE-2025-36139

概要

参考情報

• ibm.com/support/pages/node/7245387 · Vendor Advisory

watsonx.data のその他の脆弱性

• CVE-2025-36145中 5.3IBM watsonx.data 2.2 through 2.3.1 IBM Lakehouse does not properly restrict inbound and outbound connections which could allow an attacker t…
• CVE-2025-36335中 5.5IBM watsonx.data intelligence 5.2.0, 5.2.1, 5.3.0, 5.3.1 stores user credentials in plain text which can be read by a local user.
• CVE-2025-36180高 7.5IBM watsonx.data 2.2 through 2.3 IBM Lakehouse does not properly restrict communication between pods which could allow an attacker to transf…
• CVE-2025-36183低 2.7IBM watsonx.data 2.2 through 2.2.1 IBM Lakehouse could allow a privileged user to upload malicious files that could be executed server to mo…
• CVE-2025-36140中 6.5IBM watsonx.data 2.2 through 2.2.1 could allow an authenticated user to cause a denial of service through ingestion pods due to improper all…