IBM Watson CP4D Data Stores 4.6.0, 4.6.1, and 4.6.2 could allow an attacker with specific knowledge about the system to manipulate data due to improper input validation. IBM X-Force ID: 250396.
The web application does not sufficiently verify inputs that are assumed to be immutable but are actually externally controllable, such as hidden form fields.
Link | Tags |
---|---|
https://www.ibm.com/support/pages/node/6965456 | vendor advisory |
https://exchange.xforce.ibmcloud.com/vulnerabilities/250396 | vdb entry |