PT-2026-3585 · Ibm · Ibm Business Automation Workflow+1

Published 2026-01-20 · Updated 2026-02-17 · CVE-2025-36058

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Business Automation Workflow containers versions 24.0.0 through 24.0.0 Interim Fix 006 IBM Business Automation Workflow containers versions 24.0.1 through 24.0.1 Interim Fix 005 IBM Business Automation Workflow containers versions 25.0.0 through 25.0.0 Interim Fix 002

Description IBM Business Automation Workflow containers and IBM Cloud Pak for Business Automation may disclose sensitive configuration information within a config map.

Recommendations Update IBM Business Automation Workflow containers to a version after 24.0.0 Interim Fix 006. Update IBM Business Automation Workflow containers to a version after 24.0.1 Interim Fix 005. Update IBM Business Automation Workflow containers to a version after 25.0.0 Interim Fix 002.

Fix

Weakness Enumeration

CWE-538

Related Identifiers

CVE-2025-36058

Affected Products

Ibm Business Automation Workflow

Ibm Cloud Pak For Business Automation

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-36058 · Security Note
• https://osv.dev/vulnerability/CVE-2025-36058 · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/2013754354830877058 · Twitter Post
• https://ibm.com/support/pages/node/7256777 · Patch, Vendor Advisory
• https://t.me/cveNotify/152217 · Telegram Post
• https://twitter.com/CVEnew/status/2013641578481414188 · Twitter Post