CVE-2025-36221

Published: May 26, 2026Modified: Jul 24, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

IBM Cloud Pak for Data System - Cyclops 11.3.0.2 through Interim Fix 002 IBM Cloud Pak for Data System uses default passwords default passwords from the manufacturing process for use during the installation process, which could allow an attacker to bypass authentication.

Affected (3)

Products: Ibm: Cloud Pak For Data System Cyclops

Ibm

1 product

Cloud Pak For Data System Cyclops

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Ibm Cloud Pak For Data System Cyclops	Before 11.3.0.2
Ibm Cloud Pak For Data System Cyclops	Version 11.3.0.2
Ibm Cloud Pak For Data System Cyclops	Version 11.3.0.2 interim_fix_2

Related CWEs

CWE-1392

Use of Default Credentials

The product uses default credentials (such as passwords or cryptographic keys) for potentially critical functionality.

References (1)

https://www.ibm.com/support/pages/node/7273923

Source: psirt@us.ibm.com

Vendor Advisory

Timeline

No history available yet.