IBM DataStage on Cloud Pak for Data 5.4.0.0 contains an improper handling of encrypted credentials that allows an authenticated user to read credentials belonging to other users or environments. By exploiting this flaw an attacker could obtain sensitive authentication data and potentially gain unauthorized access to protected services. The weakness is classified as CWE‑522, improper restriction of credentials or credential storage due to failure to securely manage encrypted credential information.

The vulnerability affects IBM’s DataStage on Cloud Pak for Data, version 5.4.0.0, as evidenced by the CPE string provided. No additional version ranges are listed; thus only that specific build is known to be impacted.

The CVSS score of 7.7 indicates high severity. EPSS data is not available, and the issue is not listed in the CISA KEV catalog, suggesting no confirmed large‑scale exploitation yet. Exploitation requires an authenticated account within the DataStage environment; therefore, privileged or compromised user credentials are needed to leverage the vulnerability. The lack of a publicly available exploit does not reduce the risk of an internal attacker using legitimate access to read encrypted credentials.