EUVD-2026-78158
GHSA-v72p-h53q-g7f7
Severity by source
AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Low-privileged authentication required (PR:L); header manipulation is straightforward once credentials exist (AC:L); partial data and integrity impact only, no availability or scope change.
Primary rating from Vendor (us).
CVSS VectorVendor: us
Lifecycle Timeline
2DescriptionCVE.org
IBM Cloud Pak for Business Automation could allow a remote attacker to bypass authorization and invoke restricted endpoints due to improper validation of HTTP headers.
AnalysisAI
Authorization bypass in IBM Cloud Pak for Business Automation allows authenticated remote users to invoke restricted API endpoints by supplying manipulated HTTP headers that the platform fails to adequately validate. Affected version lines include 24.0.0, 24.0.1, 25.0.0, and 26.0.0, each bounded by specific interim fix thresholds. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires a valid authenticated session on the IBM Cloud Pak for Business Automation platform - the attacker must hold at least low-privileged credentials (CVSS PR:L). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 3.1 score of 5.4 (Medium) is well-calibrated for this vulnerability - PR:L constrains exploitation to already-authenticated users, C:L/I:L caps impact to partial data exposure and limited integrity effects, and A:N confirms no availability consequence. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply IBM-provided fixes that supersede the affected interim fix thresholds for the relevant release line: upgrade past 24.0.0 Interim Fix 009, 24.0.1 Interim Fix 008, 25.0.0 Interim Fix 005, or 26.0.0 Interim Fix 001, as applicable to the deployed version. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-862 – Missing Authorization
View allShare
External POC / Exploit Code
Leaving vuln.today