CVE-2025-36023CWE-639

IBM Cloud Pak for Business Automation security bypass

Medium · published August 8, 2025

CVSS v3.1
6.5
EPSS
0%
Percentile
17.0
In the wild
Unconfirmed
What it is

IBM Cloud Pak for Business Automation 24.0.0 through 24.0.0 IF005 and 24.0.1 through 24.0.1 IF002 could allow an authenticated user to view sensitive user and system information due to an indirect object reference through a user-controlled key.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00261 · 17.0th percentile
Weakness
CWE-639 · Authorization Bypass Through User-Controlled Key
Published
2025-08-08T14:51Z
EPSS history
Timeline
  • 08 AUG 14:51Z
    IBM Cloud Pak for Business Automation security bypass
    cvelistv5