CVE-2022-41731

Name of the Vulnerable Software and Affected Versions IBM Watson Knowledge Catalog on Cloud Pak for Data version 4.5.0

Description The issue allows a remote attacker to send specially crafted SQL statements, potentially enabling them to view, add, modify, or delete information in the back-end database. This is due to a SQL injection vulnerability.

Recommendations For IBM Watson Knowledge Catalog on Cloud Pak for Data version 4.5.0, consider restricting access to the database until a patch is available. As a temporary workaround, limit the ability to send specially crafted SQL statements to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.