5.5

CVE-2025-36058

Multiple security vulnerabilities are addressed in IBM Business Automation Workflow Containers fixes December 2025

IBM Business Automation Workflow containers 25.0.0 through 25.0.0 Interim Fix 002, 24.0.1 through 24.0.1 Interim Fix 005, and 24.0.0 through 24.0.0 Interim Fix 006. IBM Cloud Pak for Business Automation and IBM Business Automation Workflow containers may disclose sensitve configuration information in a config map.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Business Automation Workflow Version 24.0.0 Update - SwEdition containers
Ibm ≫ Business Automation Workflow Version 24.0.0 Update if001 SwEdition containers
Ibm ≫ Business Automation Workflow Version 24.0.0 Update if002 SwEdition containers
Ibm ≫ Business Automation Workflow Version 24.0.0 Update if003 SwEdition containers
Ibm ≫ Business Automation Workflow Version 24.0.0 Update if004 SwEdition containers
Ibm ≫ Business Automation Workflow Version 24.0.0 Update if005 SwEdition containers
Ibm ≫ Business Automation Workflow Version 24.0.0 Update if006 SwEdition containers
Ibm ≫ Business Automation Workflow Version 24.0.1 Update - SwEdition containers
Ibm ≫ Business Automation Workflow Version 24.0.1 Update if001 SwEdition containers
Ibm ≫ Business Automation Workflow Version 24.0.1 Update if002 SwEdition containers
Ibm ≫ Business Automation Workflow Version 24.0.1 Update if004 SwEdition containers
Ibm ≫ Business Automation Workflow Version 24.0.1 Update if005 SwEdition containers
Ibm ≫ Business Automation Workflow Version 25.0.0 Update - SwEdition containers
Ibm ≫ Business Automation Workflow Version 25.0.0 Update if001 SwEdition containers
Ibm ≫ Business Automation Workflow Version 25.0.0 Update if002 SwEdition containers
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.11% 0.018
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
IBM 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CWE-538 Insertion of Sensitive Information into Externally-Accessible File or Directory

The product places sensitive information into files or directories that are accessible to actors who are allowed to have access to the files, but not to the sensitive information.

https://www.ibm.com/support/pages/node/7256777
Vendor Advisory