CVE-2025-1838 | IBM Cloud Pak for Business Automation up to 24.0.0 IF004/24.0.1 IF001 client-side enforcement of server-side security

A vulnerability was found in IBM Cloud Pak for Business Automation up to 24.0.0 IF004/24.0.1 IF001. It has been declared as critical. This vulnerability affects unknown code. The manipulation leads to client-side enforcement of server-side security.

This vulnerability was named CVE-2025-1838. The attack can be initiated remotely. There is no exploit available.

It is recommended to upgrade the affected component.