The vulnerability allows a remote authenticated attacker to exploit a path traversal flaw and trigger a denial of service, affecting application availability. The specific location within DataStage on Cloud Pak for Data is not detailed, but it is inferred that it concerns file path handling. No other confidentiality or integrity impact is explicitly described.

IBM DataStage on Cloud Pak for Data 5.4.0.0 is affected. Upgrading to 5.4 patch 5 or later, as released by IBM, removes the vulnerability. No additional vendors or versions are listed.

The CVSS score of 9.6 indicates critical severity. The EPSS score is not provided, and the vulnerability is not listed in the CISA KEV catalog, so there is no known public exploitation. The likely attack vector is a remote authenticated connection to the affected application, where an attacker can supply crafted paths to trigger the denial of service.