IBM DataStage on Cloud Pak for Data 5.4.0.0 contains an absolute path traversal vulnerability (CWE-22) that can be exploited by a remote authenticated attacker to obtain sensitive information. The flaw allows the attacker to bypass pathname restrictions and access files outside the intended directory. The CVSS v3.1 base score is 8.8, indicating high severity with network attack vector, low complexity, and no user interaction required. The vulnerability affects confidentiality, integrity, and availability.

Successful exploitation of this vulnerability could lead to unauthorized disclosure of sensitive information, potential modification of data, and disruption of service. Since the attacker must be authenticated, the risk is limited to users with valid credentials. The vulnerability affects the confidentiality, integrity, and availability of the system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are provided in the available data. Until a patch is available, restrict access to authenticated users and monitor for suspicious activity related to path traversal attempts.