{"id":"CVE-2023-27291","aliases":["EUVD-2023-31069","GHSA-6676-v756-p52p"],"status":"published","title":"IBM Watson CP4D Data Stores information disclosure","description":"IBM Watson CP4D Data Stores 4.6.0, 4.6.1, 4.6.2, and 4.6.3 does not encrypt sensitive or critical information before storage or transmission which could allow an attacker to obtain sensitive information.  IBM X-Force ID:  248740.","severity":{"version":"3.1","score":4.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00333,"percentile":0.26823,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-311","CWE-319"],"published":"2024-03-03T15:39:55Z","modified":"2026-06-17T05:44:43Z","products":[{"vendor":"ibm","product":"watson cp4d data stores"},{"vendor":"ibm","product":"watson_cp4d_data_stores"}],"references":[{"url":"https://www.ibm.com/support/pages/node/6965458","tags":["vendor-advisory","x_transferred","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/248740","tags":["x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-27291"},{"url":"https://github.com/advisories/GHSA-6676-v756-p52p"}],"sources":{"cve":[{"id":"CVE-2023-27291","title":"IBM Watson CP4D Data Stores information disclosure","description":"IBM Watson CP4D Data Stores 4.6.0, 4.6.1, 4.6.2, and 4.6.3 does not encrypt sensitive or critical information before storage or transmission which could allow an attacker to obtain sensitive information.  IBM X-Force ID:  248740.","status":"published","published":"2024-03-03T15:39:55.755Z","modified":"2024-09-19T15:09:09.016Z","cvss":[{"version":"3.1","score":4.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-319"],"updated_at":"2026-11-02T14:35:26.63732Z"}],"euvd":[{"id":"EUVD-2023-31069","description":"IBM Watson CP4D Data Stores 4.6.0, 4.6.1, 4.6.2, and 4.6.3 does not encrypt sensitive or critical information before storage or transmission which could allow an attacker to obtain sensitive information.  IBM X-Force ID:  248740.","status":"published","published":"2024-03-03T15:39:55Z","modified":"2024-09-19T15:09:09Z","cvss":[{"version":"3.1","score":4.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-03T00:28:19.06347Z"}],"ghsa":[{"id":"GHSA-6676-v756-p52p","title":"IBM Watson CP4D Data Stores 4.6.0, 4.6.1, 4.6.2, and 4.6.3 does not encrypt sensitive or critical...","description":"IBM Watson CP4D Data Stores 4.6.0, 4.6.1, 4.6.2, and 4.6.3 does not encrypt sensitive or critical information before storage or transmission which could allow an attacker to obtain sensitive information.  IBM X-Force ID:  248740.","status":"published","published":"2024-03-03T18:30:46Z","modified":"2026-03-14T05:11:00Z","cvss":[{"version":"3.1","score":4.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-311","CWE-319"],"updated_at":"2026-11-02T15:06:37.566427Z"}],"nvd":[{"id":"CVE-2023-27291","description":"IBM Watson CP4D Data Stores 4.6.0, 4.6.1, 4.6.2, and 4.6.3 does not encrypt sensitive or critical information before storage or transmission which could allow an attacker to obtain sensitive information.  IBM X-Force ID:  248740.","status":"published","published":"2024-03-03T16:15:49.777Z","modified":"2026-06-17T05:44:43.39Z","cvss":[{"version":"3.1","score":4.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N","level":"medium","assessor":"secondary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary"}],"cwes":["CWE-319"],"updated_at":"2026-11-02T14:09:07.077422Z"}]}}