CVE-2022-38714: IBM DataStage on Cloud Pak for Data information disclosure

Severity: medium (CVSS 4.9 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-02-12 · updated 2026-06-17
Weakness: CWE-522

Description

IBM DataStage on Cloud Pak for Data 4.0.6 to 4.5.2 stores sensitive credential information that can be read by a privileged user. IBM X-Force ID: 235060.

Affected products

IBM Datastage: all versions

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/235060
https://www.ibm.com/support/pages/node/6618039
https://exchange.xforce.ibmcloud.com/vulnerabilities/235060
https://www.ibm.com/support/pages/node/6618039

Get alerted when CVE-2022-38714 or the next vulnerability affects your stack