CVE-2025-36023
IBM Cloud Pak for Business Automation security bypass
- State
- Published
- Severity
- 6.5 Medium
- Published
- Aug 8, 2025
- Updated
- Aug 8, 2025
- Reserved
- Apr 15, 2025
Description
IBM Cloud Pak for Business Automation 24.0.0 through 24.0.0 IF005 and 24.0.1 through 24.0.1 IF002 could allow an authenticated user to view sensitive user and system information due to an indirect object reference through a user-controlled key.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 6.5 Medium | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N | ibm |
Weaknesses
- CWE-639 Authorization Bypass Through User-Controlled Key
Affected Products
| Product | Versions |
|---|---|
Cloud Pak for Business AutomationIBM |
|
References
- https://www.ibm.com/support/pages/node/7241570vendor-advisorypatch
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.