CVE-2026-80423

Received Received - Intake

IBM DataStage Cloud Pak Data Information Exposure

Publication date: 2026-09-23

Last updated on: 2026-09-23

Assigner: IBM Corporation

Description

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to the exposure of namespace-wide secrets via accessible file mounts.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-23

Last Modified

2026-09-23

Generated

2026-09-24

AI Q&A

2026-09-24

EPSS Evaluated

N/A

NVD

CVE-2026-80423

Affected Vendors & Products

Vendor	Product	Version / Range
ibm	datastage	5.4.0.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-200	The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

Attack-Flow Graph

Executive Summary

This vulnerability in IBM DataStage on Cloud Pak for Data 5.4.0.0 allows a remote authenticated attacker to access sensitive information. The issue occurs because namespace-wide secrets are exposed through accessible file mounts, which can be read by unauthorized users.

Impact Analysis

An attacker could exploit this to steal sensitive data, such as credentials or configuration details, leading to further attacks like data breaches or unauthorized system access. The high CVSS score (8.8) indicates significant risk.

Compliance Impact

This vulnerability could lead to non-compliance with GDPR or HIPAA due to unauthorized data exposure. GDPR requires protecting personal data, while HIPAA mandates safeguarding health information. A breach could result in legal penalties and reputational damage.

Mitigation Strategies

Restrict access to namespace-wide secrets by reviewing and tightening file mount permissions. Ensure only authorized users have access to sensitive data. Monitor for unauthorized access attempts to exposed secrets.

Hi! I’m here to help you understand CVE-2026-80423. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70