Cyber Resilience

CVE-2024-43196

Medium

Published: 20 February 2025

Published
20 February 2025
Modified
11 March 2025
KEV Added
—
Patch
—
CVSS Score v3.1 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
EPSS Score 0.0010 27.8th percentile
Risk Priority 9 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2024-43196 is a medium-severity Improper Following of a Certificate's Chain of Trust (CWE-296) vulnerability in Ibm Openpages With Watson. Its CVSS base score is 4.3 (Medium).

Operationally, ranked at the 27.8th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability details

IBM OpenPages with Watson 8.3 and 9.0  application could allow an authenticated user to manipulate data in the Questionnaires application allowing the user to spoof other users' responses.

CWE(s)
CWE-296NVD-CWE-noinfo

Related Threats

No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.

Affected Assets

ibm
openpages with watson
8.3 — 8.3.0.3 · 9.0 — 9.0.0.5

Mitigating Controls

Likely Mitigating Controls AI

Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.

SC-17 Public Key Infrastructure Certificates
addresses: CWE-296

Requires only approved trust anchors in stores, ensuring proper chain-of-trust validation rather than arbitrary or incomplete paths.

References