Authentication Bypass Vulnerability in IBM Cloud Pak for Data System
CVE-2025-36221

5.3MEDIUM

Key Information:

Vendor

IBM
Status
Cloud Pak For Data System - Cyclops
Vendor
CVE Published:
26 May 2026

What is CVE-2025-36221?

The IBM Cloud Pak for Data System contains a vulnerability that allows attackers to exploit default passwords configured during the manufacturing process. This security oversight can enable unauthorized access by bypassing authentication mechanisms, potentially leading to unauthorized actions within the system. Users are strongly advised to update their installations to the latest version to mitigate risks associated with this vulnerability.

Affected Version(s)

Cloud Pak for Data System - Cyclops 11.3.0.2

References

https://www.ibm.com/support/pages/node/7273923
vendor-advisorypatch

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.