CVE 4.3 MEDIUM

IBM Business Automation Insights unverified ownership_CVE-2025-36091

4.3 / 10
MEDIUM
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Description

IBM Cloud Pak For Business Automation 25.0.0, 24.0.1, and 24.0.0 could allow an authenticated user to cause dashboards to become inaccessible to legitimate users due to invalid ownership assignment.

Basic Information

ID CVE-2025-36091
Source ibm
Published Nov 3, 2025 at 15:14
Modified Nov 3, 2025 at 15:37

Affected Product

Vendor IBM
Product Cloud Pak For Business Automation
Version 25.0.0
Affected Versions IBM Cloud Pak For Business Automation 25.0.0
IBM Cloud Pak For Business Automation 24.0.1
IBM Cloud Pak For Business Automation 24.0.0

CWE Classification

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.