Severity
High
Analysis Summary
CVE-2023-30444
IBM Watson Machine Learning on Cloud Pak for Data 4.0 and 4.5 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 253350.
Impact
- Gain Access
Indicators Of Compromise
CVE
- CVE-2023-30444
Affected Vendors
IBM
Affected Products
- IBM Watson Machine Learning on CP4D 4.0
- IBM Watson Machine Learning on CP4D 4.5
Remediation
Refer to IBM Security Bulletin for patch, upgrade or suggested workaround information.