CVE-2025-36091 - IBM Business Automation Insights unverified ownership

Back Back to CVE browser

MEDIUM

IBM Business Automation Insights unverified ownership

Published Nov 3, 2025

4.3

MEDIUM

CVSS 3.1

EPSS 0.36%

Description

IBM Cloud Pak For Business Automation 25.0.0, 24.0.1, and 24.0.0 could allow an authenticated user to cause dashboards to become inaccessible to legitimate users due to invalid ownership assignment.

Affected products

Vendor IBM Product Cloud Pak For Business Automation Default
n/a
- Version
  24.0.0
  Status
  affected
  Constraints
  -
- Version
  24.0.1
  Status
  affected
  Constraints
  -
- Version
  25.0.0
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

IBM

Cloud Pak For Business Automation

n/a

Version	Status	Constraints
24.0.0	affected	-
24.0.1	affected	-
25.0.0	affected	-

Remediation

Vendor solution

Remediation/Fixes IBM strongly recommends addressing the vulnerability now. Product(s) Version(s) number and/or range Remediation/Fix/Instructions IBM Business Automation Insights 25.0.0 Apply security fix 25.0.0-IF002 IBM Business Automation Insights 24.0.1 Apply security fix 24.0.1-IF005 IBM Business Automation Insights 24.0.0 Apply security fix 24.0.0-IF005

Weaknesses (1)

CWE-283