IBM Cloud Pak for Business Automation 24.0.0 through 24.0.0 IF005 and 24.0.1 through 24.0.1 IF002 could allow an authenticated user to view sensitive user and system information due to an indirect object reference through a user-controlled key.
References
| Link | Resource |
|---|---|
| https://www.ibm.com/support/pages/node/7241570 |
Configurations
No configuration.
History
08 Aug 2025, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-08-08 15:15
Updated : 2025-08-08 20:30
NVD link : CVE-2025-36023
Mitre link : CVE-2025-36023
CVE.ORG link : CVE-2025-36023
JSON object : View
Products Affected
No product.
CWE
CWE-639
Authorization Bypass Through User-Controlled Key