{"id":"CVE-2025-36221","state":"PUBLISHED","title":"Vulnerabilities exists in IBM Cloud Pak for Data System (CPDS 1.0) - Cyclops.","description":"IBM Cloud Pak for Data System - Cyclops 11.3.0.2 through  Interim Fix 002 IBM Cloud Pak for Data System uses default passwords default passwords from the manufacturing process for use during the installation process, which could allow an attacker to bypass authentication.","publishedAt":"2026-05-26T15:55:41.059Z","updatedAt":"2026-05-26T17:48:22.026Z","severity":{"score":5.3,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","source":"ibm"},"assigner":"ibm","products":["IBM Cloud Pak for Data System - Cyclops"],"affected":[{"vendor":"IBM","product":"Cloud Pak for Data System - Cyclops","versions":[{"version":"11.3.0.2","status":"affected","lessThanOrEqual":"Interim Fix 002","versionType":"semver"}],"cpes":["cpe:2.3:a:ibm:cloud_pak_for_data_system___cyclops:11.3.0.2:*:*:*:*:*:*:*","cpe:2.3:a:ibm:cloud_pak_for_data_system___cyclops:interim:interim_fix_002:*:*:*:*:*:*"]}],"references":["https://www.ibm.com/support/pages/node/7273923"],"weaknesses":["CWE-1392"],"ingestedAt":"2026-10-29T20:09:03.054Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/36xxx/CVE-2025-36221.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2025-36221","state":"PUBLISHED","datePublished":"2026-05-26T15:55:41.059Z","dateUpdated":"2026-05-26T17:48:22.026Z","assignerShortName":"ibm","assignerOrgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","dateReserved":"2025-04-15T21:16:41.802Z"},"containers":{"cna":{"title":"Vulnerabilities exists in IBM Cloud Pak for Data System (CPDS 1.0) - Cyclops.","descriptions":[{"lang":"en","value":"IBM Cloud Pak for Data System - Cyclops 11.3.0.2 through  Interim Fix 002 IBM Cloud Pak for Data System uses default passwords default passwords from the manufacturing process for use during the installation process, which could allow an attacker to bypass authentication."}],"affected":[{"vendor":"IBM","product":"Cloud Pak for Data System - Cyclops","versions":[{"version":"11.3.0.2","status":"affected","lessThanOrEqual":"Interim Fix 002","versionType":"semver"}],"cpes":["cpe:2.3:a:ibm:cloud_pak_for_data_system___cyclops:11.3.0.2:*:*:*:*:*:*:*","cpe:2.3:a:ibm:cloud_pak_for_data_system___cyclops:interim:interim_fix_002:*:*:*:*:*:*"]}],"references":[{"url":"https://www.ibm.com/support/pages/node/7273923","tags":["vendor-advisory","patch"]}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE","baseSeverity":"MEDIUM","baseScore":5.3,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-1392","lang":"en","description":"CWE-1392 Use of Default Credentials","type":"CWE"}]}],"providerMetadata":{"shortName":"ibm","orgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","dateUpdated":"2026-05-26T15:55:41.059Z"},"solutions":[{"lang":"en","value":"Fixed versionFix linkIBM Cloud Pak for Data System - Cyclops 11.3.1.1-WS-ICPDS-CYCLOPS-fp278500  https://www.ibm.com/support/fixcentral/swg/downloadFixes","supportingMedia":[{"type":"text/html","base64":false,"value":"<div><table><tbody><tr><td>Fixed version</td><td>Fix link</td></tr><tr><td>IBM Cloud Pak for Data System - Cyclops</td><td><a href=\"https://www.ibm.com/support/fixcentral/swg/downloadFixes?parent=ibm%7EWebSphere&amp;product=ibm/WebSphere/IBM+Cloud+Private+for+Data+System&amp;release=CYCLOPS_11.3&amp;platform=All&amp;function=fixId&amp;fixids=11.3.1.1-WS-ICPDS-CYCLOPS-fp278500&amp;includeRequisites=0&amp;includeSupersedes=0&amp;downloadMethod=http\" rel=\"nofollow\">11.3.1.1-WS-ICPDS-CYCLOPS-fp278500 </a></td></tr></tbody></table></div>"}]}],"x_generator":{"engine":"ibm-cvegen"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-05-26T17:47:14.104251Z","id":"CVE-2025-36221","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-05-26T17:48:22.026Z"}}]}}}