« Volver al listado

CVE-2025-36058

Estado: AnalizadaMedia (5.5)—

IBM Business Automation Workflow containers 25.0.0 through 25.0.0 Interim Fix 002, 24.0.1 through 24.0.1 Interim Fix 005, and 24.0.0 through 24.0.0 Interim Fix 006. IBM Cloud Pak for Business Automation and IBM Business Automation Workflow containers may disclose sensitve configuration information in a config map.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

IBM — Business Automation Workflow

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2025-36058",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2025-36058",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2026-01-20T15:53:03.007740Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "psirt@us.ibm.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 5.5,
          "attackVector": "LOCAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 1.8
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@us.ibm.com",
      "affectedData": [
        {
          "cpes": [
            "cpe:2.3:a:ibm:business_automation_workflow_containers:25.0.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:business_automation_workflow_containers:25.0.0:interim_fix_002:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:business_automation_workflow_containers:24.0.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:business_automation_workflow_containers:24.0.1:interim_fix_005:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:business_automation_workflow_containers:24.0.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:business_automation_workflow_containers:24.0.0:interim_fix_006:*:*:*:*:*:*"
          ],
          "vendor": "IBM",
          "product": "Business Automation Workflow containers",
          "versions": [
            {
              "status": "affected",
              "version": "25.0.0",
              "versionType": "semver",
              "lessThanOrEqual": "25.0.0 Interim Fix 002"
            },
            {
              "status": "affected",
              "version": "24.0.1",
              "versionType": "semver",
              "lessThanOrEqual": "24.0.1 Interim Fix 005"
            },
            {
              "status": "affected",
              "version": "24.0.0",
              "versionType": "semver",
              "lessThanOrEqual": "24.0.0 Interim Fix 006"
            }
          ]
        }
      ]
    }
  ],
  "published": "2026-01-20T16:16:02.743",
  "references": [
    {
      "url": "https://www.ibm.com/support/pages/node/7256777",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@us.ibm.com"
    }
  ],
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "psirt@us.ibm.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-538"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "IBM Business Automation Workflow containers 25.0.0 through 25.0.0 Interim Fix 002, 24.0.1 through 24.0.1 Interim Fix 005, and 24.0.0 through 24.0.0 Interim Fix 006. IBM Cloud Pak for Business Automation and IBM Business Automation Workflow containers may disclose sensitve configuration information in a config map."
    },
    {
      "lang": "es",
      "value": "Contenedores de IBM Business Automation Workflow 25.0.0 hasta 25.0.0 Interim Fix 002, 24.0.1 hasta 24.0.1 Interim Fix 005, y 24.0.0 hasta 24.0.0 Interim Fix 006. Los contenedores de IBM Cloud Pak para Business Automation e IBM Business Automation Workflow pueden divulgar información de configuración sensible en un config map."
    }
  ],
  "lastModified": "2026-06-17T09:14:25.883",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:-:*:*:containers:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EF29B7C7-5024-4A85-ADE5-D94E9002181D"
            },
            {
              "criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if001:*:*:containers:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8464D4F4-1F9A-479B-B689-C6E90BC3AF45"
            },
            {
              "criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if002:*:*:containers:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0FE0DB1D-5728-4075-BE84-48F06E22FDF5"
            },
            {
              "criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if003:*:*:containers:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A4AB37B4-DF91-4DC7-AFB9-107E5B1B2BF6"
            },
            {
              "criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if004:*:*:containers:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "79318EB6-001D-4D75-952C-87297C90A0C8"
            },
            {
              "criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if005:*:*:containers:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "38F4B5AC-AC9D-48E7-9EC8-48C086CC62A6"
            },
            {
              "criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if006:*:*:containers:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "73BAD8DC-3081-4D07-8E65-7501351DE025"
            },
            {
              "criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.1:-:*:*:containers:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D5D9EC44-05CE-44FA-AFDE-A4FA326A54F7"
            },
            {
              "criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if001:*:*:containers:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AD2EC4AD-EF47-450F-AA73-8BEE3DADEA1A"
            },
            {
              "criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if002:*:*:containers:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0CFCCD13-9342-4D3D-BE9C-ABCA4EA27229"
            },
            {
              "criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if004:*:*:containers:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5797C332-AE9A-40BF-BAA4-7ECDDEAA907C"
            },
            {
              "criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if005:*:*:containers:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D0F5EB0D-CAF6-45BC-967B-472F1C2833D9"
            },
            {
              "criteria": "cpe:2.3:a:ibm:business_automation_workflow:25.0.0:-:*:*:containers:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3058E645-44E1-4FF0-9A97-E04324BB8968"
            },
            {
              "criteria": "cpe:2.3:a:ibm:business_automation_workflow:25.0.0:if001:*:*:containers:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0E06ACEC-AC03-41AA-91C7-BA84457847A7"
            },
            {
              "criteria": "cpe:2.3:a:ibm:business_automation_workflow:25.0.0:if002:*:*:containers:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6AD427CB-B553-4ACB-B2A3-1648848D6D09"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "psirt@us.ibm.com"
}