A high-severity path traversal vulnerability in IBM DataStage on Cloud Pak for Data allows authenticated remote attackers to compromise sensitive system files and data.

This is an improper limitation of a pathname to a restricted directory (CWE-22) that enables absolute path traversal. An attacker with authenticated access can leverage this flaw to read or manipulate files outside of the intended directory structure.

Successful exploitation of this vulnerability poses a significant risk to data confidentiality and integrity. Given the CVSS score of 8.8, an attacker could potentially gain unauthorized access to critical configuration files or sensitive business data, leading to a full compromise of the application environment.

Immediate Action: Upgrade your installation to version 5.4 patch 5 or later as specified in the official IBM support documentation.

Proactive Monitoring: Review system and application access logs for unusual file access patterns or attempts to traverse directory structures using absolute path indicators.

Compensating Controls: Implement strict file system permissions and ensure that the application process operates with the least privilege necessary to limit the impact of a potential traversal.

Public Exploit Available: Unknown

The severity of this flaw, combined with the potential for unauthorized data access, necessitates immediate attention. IT administrators should prioritize the deployment of the 5.4 patch 5 update to remediate this vulnerability and prevent potential exploitation of the underlying path traversal mechanism.