PT-2026-140016

CVE-2025-1837

·

Published

2026-11-08

·

Updated

2026-11-08

Description by

CVSS 3.1
5.4
Medium
MetricsAV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
IBM watsonx Orchestrate Cartridge for Cloud Pak for Data 4.8.4 through 4.8.5, and 5.0.0 through 5.4.2 could allow an authenticated user to perform unauthorized actions due to improper trust of server-side permission methods.
Exploitability
Fix
Vendors
Affected products
Weakness enumeration
CWE-650: Trusting HTTP Permission Methods on the Server Side
Related identifiers
CVE-2025-1837
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com