Threats affecting pkg:maven/com.ibm/watsonx.data

IBM watsonx.data 2.2 through 2.3.1 IBM Lakehouse does not properly restrict inbound and outbound connections which could allow an attacker to transfer or modify files without restrictions.

IBM watsonx.data versions 2.2.0 through 2.3 have a vulnerability where communication between pods is not properly restricted. This flaw could allow an attacker to transfer data between pods without intended restrictions. The vulnerability is classified under CWE-923, indicating improper restriction of communication channels to intended endpoints. The CVSS score is 5.3, reflecting a medium severity level. No official patch or remediation guidance has been provided yet, and no known exploits are reported in the wild.

IBM watsonx.data 2.2 through 2.2.1 could allow an authenticated user to cause a denial of service through ingestion pods due to improper allocation of resources without limits.