CVE-2025-36221
Vulnerabilities exists in IBM Cloud Pak for Data System (CPDS 1.0) - Cyclops.
- State
- Published
- Severity
- 5.3 Medium
- Published
- May 26, 2026
- Updated
- May 26, 2026
- Reserved
- Apr 15, 2025
Description
IBM Cloud Pak for Data System - Cyclops 11.3.0.2 through Interim Fix 002 IBM Cloud Pak for Data System uses default passwords default passwords from the manufacturing process for use during the installation process, which could allow an attacker to bypass authentication.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 5.3 Medium | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N | ibm |
Weaknesses
- CWE-1392 Use of Default Credentials
Affected Products
| Product | Versions |
|---|---|
Cloud Pak for Data System - CyclopsIBM |
|
References
- https://www.ibm.com/support/pages/node/7273923vendor-advisorypatch
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.