IBM OpenPages with Watson 8.3 and 9.0 could allow authenticated users access to sensitive information through improper authorization controls on APIs.
The product requires authentication, but the product has an alternate path or channel that does not require authentication.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Openpages_grc_platform | Ibm | 8.3 (including) | 8.3 (including) |
| Openpages_with_watson | Ibm | 9.0 (including) | 9.0 (including) |