Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
IBM OpenPages improper certificate validation
Vulnerability Description
IBM OpenPages with Watson 8.3 and 9.0 could allow a remote attacker to spoof mail server identity when using SSL/TLS security. An attacker could exploit this vulnerability to gain access to sensitive information disclosed through email notifications generated by OpenPages or disrupt notification delivery.
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H
Vulnerability Type
对宿主不匹配的证书验证不恰当
Vulnerability Title
IBM OpenPages with Watson 安全漏洞
Vulnerability Description
IBM OpenPages with Watson是美国国际商业机器（IBM）公司的一个AI驱动的金融风险分析解决方案。该平台基于AI技术来预测风险系数，将风险数据通过集成、自动识别、测量、监控、分析、管理等步骤将金融活动中的风险最小化。 IBM OpenPages with Watson 8.3版本和9.0版本存在安全漏洞，该漏洞源于使用SSL/TLS时未正确验证邮件服务器身份。攻击者利用该漏洞可以伪造邮件服务器身份，窃取通过OpenPages生成的电子邮件通知中的敏感信息或中断通知传递。
CVSS Information
N/A
Vulnerability Type
N/A