ibmCVE-2026-81208
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow an authenticated user to access sensitive information due to improper handling of encrypted credentials.
High7.7CVE-2026-81208 · Published Sep 23, 2026 · updated Sep 24, 2026
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| DataStage on Cloud Pak for Data Vendor | <= 5.4.0.0 | No fix yet |
Details and references
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow an authenticated user to access sensitive information due to improper handling of encrypted credentials. An attacker could exploit this vulnerability to obtain credentials intended for other users or environments.
- CVSS 3.1
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
- Severity from
- no source yet
- Weakness
- CWE-522