PT-2025-44768 · Ibm · Ibm Cloud Pak For Business Automation

Published 2025-11-03 · Updated 2025-11-05 · CVE-2025-36091

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions IBM Cloud Pak For Business Automation versions 25.0.0, 24.0.1, and 24.0.0

Description An authenticated user can cause dashboards to become inaccessible to legitimate users due to invalid ownership assignment.

Recommendations Update IBM Cloud Pak For Business Automation version 25.0.0 to a newer version. Update IBM Cloud Pak For Business Automation version 24.0.1 to a newer version. Update IBM Cloud Pak For Business Automation version 24.0.0 to a newer version.

Fix

Weakness Enumeration

CWE-283

Related Identifiers

CVE-2025-36091

Affected Products

Ibm Cloud Pak For Business Automation

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-36091 · Security Note
• https://osv.dev/vulnerability/CVE-2025-36091 · Vendor Advisory
• https://t.me/cveNotify/141805 · Telegram Post
• https://ibm.com/support/pages/node/7249999 · Patch, Vendor Advisory
• https://t.me/CVEtracker/36415 · Telegram Post