CNNVD-202508-800 Information
CNNVD ID
CNNVD-202508-800
Related CVE
- CNNVD Published: 2025-08-08
Description (Chinese)
IBM Cloud Pak for Business Automation是美国国际商业机器（IBM）公司的一组模块化的集成软件组件，专为任何混合云而构建，旨在实现工作自动化和加速业务增长。 IBM Cloud Pak for Business Automation 24.0.0至24.0.0 IF005和24.0.1至24.0.1 IF002版本存在安全漏洞，该漏洞源于通过用户控制键间接引用对象导致信息泄露。
Description (English)
IBM Cloud Pak for Business Automation is a modular integrated software component of the United States International Business Machine (IBM) Company, built for any hybrid cloud, aimed at automating work and accelerating business growth. IBM Cloud Pak for Business Action 24.0.0-24.0.0 IF005 and 24.0.1-24.01 IF002 have security loopholes, which stem from information leaks through indirect references via user control keys.
Hazard Level
High
Vulnerability Type
其他
Affected Vendor
国际商业机器
Published
2025-08-08
Last Modified
2026-02-24
References
https://www.ibm.com/support/pages/node/7241570 https://access.redhat.com/security/cve/cve-2025-36023
Patch
https://www.ibm.com/support/pages/node/7241570
Share on: