{"id":"CVE-2026-81208","aliases":["EUVD-2026-85707","GHSA-w4gx-4wqm-cq66"],"status":"published","title":"DataStage on Cloud Pak for Data has several vulnerabilities","description":"IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow an authenticated user to access sensitive information due to improper handling of encrypted credentials. An attacker could exploit this vulnerability to obtain credentials intended for other users or environments.","severity":{"version":"3.1","score":7.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.0034,"percentile":0.27847,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-522"],"published":"2026-09-23T21:37:48Z","modified":"2026-10-06T16:13:07Z","products":[{"vendor":"ibm","product":"datastage on cloud pak for data"},{"vendor":"ibm","product":"datastage_on_cloud_pak_for_data"}],"references":[{"url":"https://www.ibm.com/support/pages/node/7288649","tags":["vendor-advisory","patch","Patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-81208"},{"url":"https://github.com/advisories/GHSA-w4gx-4wqm-cq66"}],"sources":{"cve":[{"id":"CVE-2026-81208","title":"DataStage on Cloud Pak for Data has several vulnerabilities","description":"IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow an authenticated user to access sensitive information due to improper handling of encrypted credentials. An attacker could exploit this vulnerability to obtain credentials intended for other users or environments.","status":"published","published":"2026-09-23T21:37:48.665Z","modified":"2026-09-24T13:21:49.458Z","cvss":[{"version":"3.1","score":7.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","level":"high","assessor":"cna"}],"cwes":["CWE-522"],"updated_at":"2026-11-02T13:36:18.075535Z"}],"euvd":[{"id":"EUVD-2026-85707","description":"IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow an authenticated user to access sensitive information due to improper handling of encrypted credentials. An attacker could exploit this vulnerability to obtain credentials intended for other users or environments.","status":"published","published":"2026-09-23T21:37:48Z","modified":"2026-09-24T13:21:49Z","cvss":[{"version":"3.1","score":7.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T17:27:59.466335Z"}],"ghsa":[{"id":"GHSA-w4gx-4wqm-cq66","title":"IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow an authenticated user to access sensitive...","description":"IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow an authenticated user to access sensitive information due to improper handling of encrypted credentials. An attacker could exploit this vulnerability to obtain credentials intended for other users or environments.","status":"published","published":"2026-09-24T00:30:25Z","modified":"2026-09-24T00:30:29Z","cvss":[{"version":"3.1","score":7.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-522"],"updated_at":"2026-11-02T15:12:21.685353Z"}],"nvd":[{"id":"CVE-2026-81208","description":"IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow an authenticated user to access sensitive information due to improper handling of encrypted credentials. An attacker could exploit this vulnerability to obtain credentials intended for other users or environments.","status":"published","published":"2026-09-23T22:16:57.41Z","modified":"2026-10-06T16:13:07.39Z","cvss":[{"version":"3.1","score":7.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","level":"high","assessor":"secondary"}],"cwes":["CWE-522"],"updated_at":"2026-11-02T14:12:51.036099Z"}]}}