Technical impact
IBM Watsonx.data Intelligence versions 5.2.0, 5.2.1, 5.3.0, 5.3.1 store user credentials in plain text, enabling a local user to read them. This weakness compromises the confidentiality of authentication information and could allow credential theft or account takeover if the local user already has access to the system.
Affected Systems
The vulnerability affects IBM Watsonx.data Intelligence, a data and intelligence platform. The impacted product versions include 5.2.0, 5.2.1, 5.3.0, and 5.3.1.
Risk and Exploitability
The CVSS score of 6.2 indicates a moderate severity. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog. The attack vector is local: a malicious or compromised local user can read a file that contains credentials in clear text, compromising confidentiality. No remote exploitation is described by the input data.
