4.3
/ 10
MEDIUM
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Description
IBM Cloud Pak For Business Automation 25.0.0, 24.0.1, and 24.0.0 could allow an authenticated user to cause dashboards to become inaccessible to legitimate users due to invalid ownership assignment.
Basic Information
ID
CVE-2025-36091
Source
ibm
Published
Nov 3, 2025 at 15:14
Modified
Nov 3, 2025 at 15:37
Affected Product
Vendor
IBM
Product
Cloud Pak For Business Automation
Version
25.0.0
Affected Versions
IBM Cloud Pak For Business Automation 25.0.0
IBM Cloud Pak For Business Automation 24.0.1
IBM Cloud Pak For Business Automation 24.0.0
IBM Cloud Pak For Business Automation 24.0.1
IBM Cloud Pak For Business Automation 24.0.0