CVE-2024-49783 IBM OpenPages with Watson information disclosure
Authenticated attackers with database or file access can potentially decrypt stored data due to weak cryptographic implementation in IBM OpenPages with Watson.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-49783?
CVE-2024-49783 is a medium-severity vulnerability in IBM OpenPages with Watson, published on 8 Jul 2025. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
IBM OpenPages with Watson 8.3 and 9.0
could provide weaker than expected security in storage of encrypted data. If an authenticated remote attacker with access to the database or a local attacker with access to server files could extract the encrypted data, they could exploit this vulnerability to use additional cryptographic methods to possibly extract the encrypted data.
Weakness: CWE-329
Which versions are affected by CVE-2024-49783?
It affects 1 product.
Products include Ibm Openpages With Watson.
How do I fix CVE-2024-49783?
No fix has been published for CVE-2024-49783 yet. Limit exposure of the affected software until one is available.
Is CVE-2024-49783 being exploited?
There is no known exploitation of CVE-2024-49783 in the wild and no public exploit code.
Other vulnerabilities in IBM OpenPages with Watson
Sources
Also known as GHSA-wpq6-5m7q-85xr.