CVE-2024-49353

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-49353

7.5 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

I

BM Watson Speech Services Cartridge for IBM Cloud Pak for Data 4.0.0 through 5.0.2 does not properly check inputs to resources that are used concurrently, which might lead to unexpected states, possibly resulting in a crash.

References
Link Resource
https://www.ibm.com/support/pages/node/7177065 Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:ibm:watson_assistant_for_ibm_cloud_pak_for_data:*:*:*:*:*:*:*:*
History

15 Aug 2025, 14:33

Type Values Removed Values Added
References () https://www.ibm.com/support/pages/node/7177065 - () https://www.ibm.com/support/pages/node/7177065 - Vendor Advisory
Summary
  • (es) IBM Watson Speech Services Cartridge para IBM Cloud Pak for Data 4.0.0 a 5.0.2 no verifica correctamente las entradas a los recursos que se utilizan simultáneamente, lo que puede generar estados inesperados que posiblemente provoquen un bloqueo.
CPE cpe:2.3:a:ibm:watson_assistant_for_ibm_cloud_pak_for_data:*:*:*:*:*:*:*:*
First Time Ibm
Ibm watson Assistant For Ibm Cloud Pak For Data

26 Nov 2024, 04:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-11-26 04:15

Updated : 2025-08-15 14:33

NVD link : CVE-2024-49353

Mitre link : CVE-2024-49353

CVE.ORG link : CVE-2024-49353

JSON object : View

Products Affected

ibm

CWE
CWE-362

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')