CVE-2024-49785
CVE-2024-49785: IBM watsonx.ai is vulnerable to cross-site scripting (XSS). This flaw enables authenticated users to inject malicious JavaScript into the web UI, potentially leading to credentials disclosure. The IBM watsonx.ai vulnerability affects versions 1.1 through 2.0.3 and IBM watsonx.ai on Cloud Pak for Data 4.8 through 5.0.3. Successful exploitation could compromise user sessions and sensitive data. Despite a moderate CVSS score of 5.4, this XSS vulnerability allows attackers to execute arbitrary code within a user's browser session, leading to potential data theft or unauthorized actions. The SOCRadar Vulnerability Risk Score (SVRS) is 53, indicating a moderate risk level; while not critical, this vulnerability requires monitoring and patching to prevent potential exploitation. Immediate action is not required, but keeping abreast of any new threat information associated with this CVE is advised.
Description
CVE-2024-49785 is a cross-site scripting (XSS) vulnerability affecting IBM watsonx.ai versions 1.1 through 2.0.3 and IBM watsonx.ai on Cloud Pak for Data versions 4.8 through 5.0.3. This vulnerability allows an authenticated user to inject malicious JavaScript code into the web interface, potentially altering the intended functionality and leading to credential disclosure within a trusted session.
SVRS: While the CVSS score is 5.4, the SOCRadar Vulnerability Risk Score (SVRS) is 38, indicating a moderate risk. This suggests that although the vulnerability is exploitable, it may not be as critical as others and requires careful attention and mitigation.
Key Insights
- Exploitability: This vulnerability requires an authenticated user, meaning attackers must first gain access to the system before exploiting the vulnerability.
- Impact: The potential impact of this vulnerability is significant, as it could lead to credential disclosure and potentially full account compromise.
- Widely Affected: The vulnerability affects multiple versions of IBM watsonx.ai, both standalone and on Cloud Pak for Data. Organizations using these platforms should prioritize mitigation.
Mitigation Strategies
- Update to Latest Versions: Immediately update to the latest versions of IBM watsonx.ai and Cloud Pak for Data. These versions include patches that address this vulnerability.
- Input Validation and Sanitization: Implement robust input validation and sanitization techniques to prevent malicious scripts from being injected into the web interface.
- Web Application Firewall (WAF): Deploy a WAF to filter out malicious requests and prevent XSS attacks from reaching the vulnerable application.
Additional Information
This vulnerability is actively being exploited in the wild. It is imperative that organizations using affected IBM watsonx.ai versions take immediate action to mitigate the risks.
If you have any further questions about this incident, please use the 'Ask to Analyst' feature, contact SOCRadar directly, or open a support ticket for more information.
Indicators of Compromise
Exploits
News
Social Media
Affected Software
References
CWE Details
CVE Radar
Real-time CVE Intelligence & Vulnerability Management Platform
CVE Radar provides comprehensive vulnerability intelligence by monitoring CVE databases, security advisories, and threat feeds. Get instant updates on new vulnerabilities, exploit details, and mitigation strategies specific to your assets.