Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
IBM OpenPages with Watson improper input validation
Vulnerability Description
IBM OpenPages with Watson 8.3 and 9.0 is vulnerable to improper input validation due to bypassing of client-side validation for the data types and requiredness of fields for GRC Objects when an authenticated user sends a specially crafted payload to the server allowing for data to be saved without storing the required fields.
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N
Vulnerability Type
服务端安全的客户端实施
Vulnerability Title
IBM OpenPages with Watson 安全漏洞
Vulnerability Description
IBM OpenPages with Watson是美国国际商业机器(IBM)公司的一个AI驱动的金融风险分析解决方案。该平台基于AI技术来预测风险系数,将风险数据通过集成、自动识别、测量、监控、分析、管理等步骤将金融活动中的风险最小化。 IBM OpenPages with Watson 8.3版本和9.0版本存在安全漏洞,该漏洞源于绕过客户端验证,允许认证用户通过特制有效载荷保存数据而不存储必填字段。
CVSS Information
N/A
Vulnerability Type
N/A