4.3

CVE-2025-36091

IBM Business Automation Insights unverified ownership

IBM Cloud Pak For Business Automation 25.0.0, 24.0.1, and 24.0.0 could allow an authenticated user to cause dashboards to become inaccessible to legitimate users due to invalid ownership assignment.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Cloud Pak For Business Automation Version 24.0.0 Update -
Ibm ≫ Cloud Pak For Business Automation Version 24.0.0 Update interim_fix_001
Ibm ≫ Cloud Pak For Business Automation Version 24.0.0 Update interim_fix_002
Ibm ≫ Cloud Pak For Business Automation Version 24.0.0 Update interim_fix_003
Ibm ≫ Cloud Pak For Business Automation Version 24.0.0 Update interim_fix_004
Ibm ≫ Cloud Pak For Business Automation Version 24.0.1 Update -
Ibm ≫ Cloud Pak For Business Automation Version 24.0.1 Update interim_fix_001
Ibm ≫ Cloud Pak For Business Automation Version 24.0.1 Update interim_fix_002
Ibm ≫ Cloud Pak For Business Automation Version 24.0.1 Update interim_fix_004
Ibm ≫ Cloud Pak For Business Automation Version 25.0.0 Update -
Ibm ≫ Cloud Pak For Business Automation Version 25.0.0 Update interim_fix_001
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.33% 0.256
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
IBM 4.3 2.8 1.4
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
CWE-283 Unverified Ownership

The product does not properly verify that a critical resource is owned by the proper entity.

https://www.ibm.com/support/pages/node/7249999
Vendor Advisory