2 lines
2.4 KiB
JSON
2 lines
2.4 KiB
JSON
{"affected":[{"affectedData":[{"cpes":["cpe:2.3:a:ibm:watsonx_orchestrate_cartridge_for_cloud_pak_for_data:4.8.4:*:*:*:*:*:*:*","cpe:2.3:a:ibm:watsonx_orchestrate_cartridge_for_cloud_pak_for_data:4.8.5:*:*:*:*:*:*:*","cpe:2.3:a:ibm:watsonx_orchestrate_cartridge_for_cloud_pak_for_data:5.0.0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:watsonx_orchestrate_cartridge_for_cloud_pak_for_data:5.4.2:*:*:*:*:*:*:*"],"product":"watsonx Orchestrate Cartridge for Cloud Pak for Data","vendor":"IBM","versions":[{"lessThanOrEqual":"4.8.5","status":"affected","version":"4.8.4","versionType":"semver"},{"lessThanOrEqual":"5.4.2","status":"affected","version":"5.0.0","versionType":"semver"}]}],"source":"psirt@us.ibm.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"IBM watsonx Orchestrate Cartridge for Cloud Pak for Data 4.8.4 through 4.8.5, and 5.0.0 through 5.4.2 could allow an authenticated user to perform unauthorized actions due to improper trust of server-side permission methods."},{"lang":"es","value":"IBM watsonx Orchestrate Cartridge para Cloud Pak for Data 4.8.4 hasta la versión 4.8.5 incluida, y 5.0.0 hasta la versión 5.4.2 incluida, podría permitir a un usuario autenticado realizar acciones no autorizadas debido a una confianza inadecuada en los métodos de permiso del lado del servidor."}],"id":"CVE-2025-1837","lastModified":"2026-11-11T23:10:00.263","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.4,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","version":"3.1"},"exploitabilityScore":2.8,"impactScore":2.5,"source":"psirt@us.ibm.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2025-1837","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-09T17:09:17.662202Z","version":"2.0.3"}}]},"published":"2026-11-08T16:16:35.760","references":[{"source":"psirt@us.ibm.com","url":"https://www.ibm.com/support/pages/node/7293785"}],"sourceIdentifier":"psirt@us.ibm.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-650"}],"source":"psirt@us.ibm.com","type":"Secondary"}]}
|