IBM watsonx.data intelligence versions 5.2.2, 5.3.0, 5.3.1, and 5.3.1 patch-1 transmit sensitive information in clear text over the network. This exposure enables attackers positioned between the communicating parties to capture sensitive data via man-in-the-middle attacks. The vulnerability is identified as CWE-319 (Cleartext Transmission of Sensitive Information). No vendor advisory or patch information is currently available to confirm remediation status.

The vulnerability allows an unauthenticated remote attacker to intercept sensitive information transmitted in clear text, potentially compromising confidentiality. There is no impact on integrity or availability reported. The medium CVSS score reflects the risk of data exposure without direct system compromise.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, organizations should consider using network-level encryption or secure tunnels (e.g., VPN, TLS proxies) to protect data in transit involving affected versions.