VULNERABILITY INTELLIGENCE

CVE-2025-36023

CVSS score6.5 MEDIUM
EPSS probability0.29%
CISA KEVNot currently listed
Published2025-08-08
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Description

IBM Cloud Pak for Business Automation 24.0.0 through 24.0.0 IF005 and 24.0.1 through 24.0.1 IF002 could allow an authenticated user to view sensitive user and system information due to an indirect object reference through a user-controlled key.

Weakness classification

  • psirt@us.ibm.com: CWE-639

Primary references