PT-2026-22817 · Ibm · Cloud Pak For Data+1
CVE-2025-13687
·
Publicado
2026-03-03
·
Atualizado
2026-03-03
CVSS v3.1
8.8
Alta
| Vetor | AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
IBM DataStage on Cloud Pak for Data versions 5.1.2 through 5.3.0
Description
An authenticated user may be able to execute arbitrary commands with normal user privileges on the system. This is due to improper validation of user-supplied input through the user-defined function component.
Recommendations
Update IBM DataStage on Cloud Pak for Data to a version later than 5.3.0.
Correção
OS Command Injection
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Cloud Pak For Data
Ibm Datastage