Unauthorized Action Vulnerability in IBM WatsonX Orchestrate Cartridge for Cloud Pak for Data
CVE-2025-1837

5.4MEDIUM

Key Information:

Vendor

IBM
Status
Watsonx Orchestrate Cartridge For Cloud Pak For Data
Vendor
CVE Published:
8 November 2026

What is CVE-2025-1837?

The IBM WatsonX Orchestrate Cartridge for Cloud Pak for Data versions 4.8.4 to 4.8.5 and 5.0.0 to 5.4.2 contains a vulnerability that enables an authenticated user to exploit improper trust in server-side permission methods, potentially leading to unauthorized actions within the system. This misconfiguration poses a significant risk to data integrity and application security, urging users to take necessary precautions.

Affected Version(s)

watsonx Orchestrate Cartridge for Cloud Pak for Data 4.8.4 <= 4.8.5

watsonx Orchestrate Cartridge for Cloud Pak for Data 5.0.0 <= 5.4.2

References

https://www.ibm.com/support/pages/node/7293785
vendor-advisorypatch

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.