CVE-2024-49353

HIGH

7.5

Description

IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data 4.0.0 through 5.0.2 does not properly check inputs to resources that are used concurrently, which might lead to unexpected states, possibly resulting in a crash.

CVE Details

CVSS v3.1 Score7.5

SeverityHIGH

CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack VectorNETWORK

ComplexityLOW

Privileges RequiredNONE

User InteractionNONE

Published11/26/2024

Last Modified8/15/2025

Sourcenvd

Honeypot Sightings0

Affected Products

ibm:watson_assistant_for_ibm_cloud_pak_for_data

Weaknesses (CWE)

CWE-362

References

https://www.ibm.com/support/pages/node/7177065(psirt@us.ibm.com)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.