CVE-2022-38714Disclosure(ibm / cloud_pak_for_data)

LOWCVSS 4.9 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

IBM DataStage on Cloud Pak for Data 4.0.6 to 4.5.2 stores sensitive credential information that can be read by a privileged user. IBM X-Force ID: 235060.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-522

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • cloud_pak_for_data
  • datastage

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • Technical details provided in 1 signal
  • Disclosure: 1 classified signal
  • 1 total mentions across 1 day

Affected systems

Vendors
Products
cloud_pak_for_datadatastage

1 version affected across 2 products

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-08-13: 1Technical Details · 2026-08-13: 108-13
Signal classification1 categories
Disclosure
1100.0%
Referenced assets1 URL
Full discourse1 post
  • ThreatAft@ThreatAft
    Disclosure

    🔐 CVE-2022-38714 — IBM DataStage Sensitive database credentials could be exposed to privileged users. ⚠️ CVSS 4.9 | Medium 🎯 DataStage on Cloud Pak for Data 4.0.6–4.5.2 🔗 https://threataft.com/articles/ibm-datastage-sensitive-credential-disclosure-cve-2022-38714?utm_source=twitter&utm_medium=social&utm_campaign=share #CyberSecurity #CVE #IBM #InfoSec https://t.co/bVmwWdF9Vv

    Post summary

    The tweet announces a medium‑severity credential disclosure in IBM DataStage, detailing affected versions and presenting a link to an article for further information.

    0000046
    36 followersView on X
CPE platform detail2 entries

2 of 2 entries

PartVendorProductVersionTarget SWTarget HW
Appibmcloud_pak_for_data---
Appibmdatastage---

Explore more