Threats affecting pkg:rpm/ibm/watsonx_orchestrate_cartridge_for_cloud_pak_for_data

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	5.4	CVE-2025-1837IBM watsonx Orchestrate Cartridge for Cloud Pak for Data · Trusting HTTP Permission Methods on the Server Side Medium5.42026-11-08CVE Database V5CVE-2025-1837 CVE-2025-1837 is a vulnerability in IBM watsonx Orchestrate Cartridge for Cloud Pak for Data versions 4.8.4 through 4.8.5 and 5.0.0 through 5.4.2. It allows an authenticated user to perform unauthorized actions due to improper trust of server-side permission methods. The flaw relates to CWE-650, which involves trusting HTTP permission methods on the server side incorrectly. The vulnerability has a medium severity with a CVSS score of 5.4. Vulnerability CWE-650	CVE Database V5	2026-11-08

Page 1 of 1