{"id":"CVE-2026-82103","published":"2026-10-12T23:17:42.110","lastModified":"2026-10-14T23:50:51.073","description":"IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to an exposure of sensitive information to an unauthorized actor.","cvssScore":9.6,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N","cwes":["CWE-200"],"vendors":["ibm"],"products":["datastage on cloud pak for data"],"references":[{"url":"https://www.ibm.com/support/pages/node/7288649","tags":["Patch","Vendor Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A remote authenticated attacker can extract sensitive information from IBM DataStage on Cloud Pak for Data 5.4.0.0 due to improper access controls that expose confidential data to unauthorized users within the same system.","exploitability":"Exploitation requires an authenticated user account with access to the DataStage service, making it moderately difficult to achieve but not highly complex.","blast_radius":"If exploited, attackers could gain access to sensitive business data, configuration details, and potentially other system information across multiple users and workloads within the Cloud Pak for Data environment.","remediation":"Upgrade to IBM DataStage on Cloud Pak for Data version 5.4.0.1 or later to address this sensitive information exposure vulnerability.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["information-disclosure","cloud-pak","datastage"],"model":"garnet-coder","analyzedAt":"2026-10-13T08:48:09.463Z"}}