IBM OpenPages with Watson 8.3 and 9.0 could allow authenticated users access to sensitive information through improper authorization controls on APIs.
A product requires authentication, but the product has an alternate path or channel that does not require authentication.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Openpages_grc_platform | Ibm | 8.3 (including) | 8.3 (including) |
| Openpages_with_watson | Ibm | 9.0 (including) | 9.0 (including) |