IBM DataStage Cloud Pak 5.4.0.0 Improper Credential Handling (CVE-2026-81208)
CVE-2026-81208 Published on September 23, 2026
DataStage on Cloud Pak for Data has several vulnerabilities
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow an authenticated user to access sensitive information due to improper handling of encrypted credentials. An attacker could exploit this vulnerability to obtain credentials intended for other users or environments.
Vulnerability Analysis
CVE-2026-81208 is exploitable with network access, and requires small amount of user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have a high impact on confidentiality, with no impact on integrity and availability.
Weakness Type
Insufficiently Protected Credentials
The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.
Products Associated with CVE-2026-81208
Want to know whenever a new CVE is published for IBM Datastage On Cloud Pak Data? stack.watch will email you.
