Improper Access Control in IBM Cloud Pak For Business Automation

CVE-2025-36093

What is CVE-2025-36093?

IBM Cloud Pak For Business Automation versions 25.0.0, 24.0.1, and 24.0.0 are susceptible to unauthorized access threats due to inadequate access controls. This vulnerability enables attackers to leverage man-in-the-middle techniques, potentially allowing them to intercept communications and manipulate or access sensitive content and actions within the affected products. Organizations utilizing these versions should apply necessary security measures to mitigate potential risks associated with this vulnerability.

References