CVE-2025-13616
Information Disclosure in IBM DataStage on Cloud Pak for Data
Publication date: 2026-03-03
Last updated on: 2026-03-04
Assigner: IBM Corporation
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| ibm | datastage_on_cloud_pak_for_data | From 5.1.2 (inc) to 5.3.1 (exc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-497 | The product does not properly prevent sensitive system-level information from being accessed by unauthorized actors who do not have the same level of access to the underlying system as the product does. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
CVE-2025-13616 affects IBM DataStage on Cloud Pak for Data versions 5.1.2 through 5.3.0. The vulnerability involves the exposure of sensitive information in HTTP responses. This sensitive information could be used by attackers to facilitate further attacks against the system.
It is classified under CWE-497, which means sensitive system information is exposed to an unauthorized control sphere. The vulnerability has a CVSS v3.1 base score of 6.5, indicating a moderate severity with a network attack vector, low attack complexity, and requiring low privileges.
How can this vulnerability impact me? :
This vulnerability can impact you by exposing sensitive information through HTTP responses, which attackers could exploit to launch further attacks on your system.
- Attackers may gain access to confidential data, leading to potential data breaches.
- The exposure could be leveraged to compromise system security or escalate privileges.
- There is no impact on system integrity or availability, but confidentiality is highly affected.
How does this vulnerability affect compliance with common standards and regulations (like GDPR, HIPAA)?:
I don't know
How can this vulnerability be detected on my network or system? Can you suggest some commands?
I don't know
What immediate steps should I take to mitigate this vulnerability?
IBM strongly recommends remediation by upgrading affected installations of IBM DataStage on Cloud Pak for Data to version 5.3.1 or later.
No workarounds or mitigations are provided for this vulnerability.
Customers should assess the impact of this vulnerability within their specific environments to understand the risk.