9.1

CVE-2025-36157

IBM Engineering Lifecycle Management incorrect authorization

IBM Jazz Foundation 7.0.2 to 7.0.2 iFix035, 7.0.3 to 7.0.3 iFix018, and 7.1.0 to 7.1.0 iFix004 could allow an unauthenticated remote attacker to update server property files that would allow them to perform unauthorized actions.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Jazz Foundation Version 7.0.2 Update -
Ibm ≫ Jazz Foundation Version 7.0.2 Update ifix001
Ibm ≫ Jazz Foundation Version 7.0.2 Update ifix002
Ibm ≫ Jazz Foundation Version 7.0.2 Update ifix003
Ibm ≫ Jazz Foundation Version 7.0.2 Update ifix004
Ibm ≫ Jazz Foundation Version 7.0.2 Update ifix005
Ibm ≫ Jazz Foundation Version 7.0.2 Update ifix006
Ibm ≫ Jazz Foundation Version 7.0.2 Update ifix007
Ibm ≫ Jazz Foundation Version 7.0.2 Update ifix008a
Ibm ≫ Jazz Foundation Version 7.0.2 Update ifix009
Ibm ≫ Jazz Foundation Version 7.0.2 Update ifix010
Ibm ≫ Jazz Foundation Version 7.0.2 Update ifix011
Ibm ≫ Jazz Foundation Version 7.0.2 Update ifix012
Ibm ≫ Jazz Foundation Version 7.0.2 Update ifix013
Ibm ≫ Jazz Foundation Version 7.0.2 Update ifix014
Ibm ≫ Jazz Foundation Version 7.0.2 Update ifix016
Ibm ≫ Jazz Foundation Version 7.0.2 Update ifix017
Ibm ≫ Jazz Foundation Version 7.0.2 Update ifix018
Ibm ≫ Jazz Foundation Version 7.0.2 Update ifix020a
Ibm ≫ Jazz Foundation Version 7.0.2 Update ifix021
Ibm ≫ Jazz Foundation Version 7.0.2 Update ifix022
Ibm ≫ Jazz Foundation Version 7.0.2 Update ifix023
Ibm ≫ Jazz Foundation Version 7.0.2 Update ifix024
Ibm ≫ Jazz Foundation Version 7.0.2 Update ifix025
Ibm ≫ Jazz Foundation Version 7.0.2 Update ifix026a
Ibm ≫ Jazz Foundation Version 7.0.2 Update ifix027
Ibm ≫ Jazz Foundation Version 7.0.2 Update ifix028
Ibm ≫ Jazz Foundation Version 7.0.2 Update ifix029
Ibm ≫ Jazz Foundation Version 7.0.2 Update ifix030
Ibm ≫ Jazz Foundation Version 7.0.2 Update ifix031
Ibm ≫ Jazz Foundation Version 7.0.2 Update ifix032
Ibm ≫ Jazz Foundation Version 7.0.2 Update ifix033
Ibm ≫ Jazz Foundation Version 7.0.2 Update ifix034
Ibm ≫ Jazz Foundation Version 7.0.2 Update ifix035
Ibm ≫ Jazz Foundation Version 7.0.3 Update -
Ibm ≫ Jazz Foundation Version 7.0.3 Update ifix001
Ibm ≫ Jazz Foundation Version 7.0.3 Update ifix002
Ibm ≫ Jazz Foundation Version 7.0.3 Update ifix003
Ibm ≫ Jazz Foundation Version 7.0.3 Update ifix004
Ibm ≫ Jazz Foundation Version 7.0.3 Update ifix005
Ibm ≫ Jazz Foundation Version 7.0.3 Update ifix006
Ibm ≫ Jazz Foundation Version 7.0.3 Update ifix007
Ibm ≫ Jazz Foundation Version 7.0.3 Update ifix008
Ibm ≫ Jazz Foundation Version 7.0.3 Update ifix009
Ibm ≫ Jazz Foundation Version 7.0.3 Update ifix010
Ibm ≫ Jazz Foundation Version 7.0.3 Update ifix011
Ibm ≫ Jazz Foundation Version 7.0.3 Update ifix012
Ibm ≫ Jazz Foundation Version 7.0.3 Update ifix013
Ibm ≫ Jazz Foundation Version 7.0.3 Update ifix014
Ibm ≫ Jazz Foundation Version 7.0.3 Update ifix015
Ibm ≫ Jazz Foundation Version 7.0.3 Update ifix016
Ibm ≫ Jazz Foundation Version 7.0.3 Update ifix017
Ibm ≫ Jazz Foundation Version 7.0.3 Update ifix018
Ibm ≫ Jazz Foundation Version 7.1.0 Update -
Ibm ≫ Jazz Foundation Version 7.1.0 Update ifix001
Ibm ≫ Jazz Foundation Version 7.1.0 Update ifix002
Ibm ≫ Jazz Foundation Version 7.1.0 Update ifix003
Ibm ≫ Jazz Foundation Version 7.1.0 Update ifix004
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.54% 0.42
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 9.1 3.9 5.2
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
IBM 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-863 Incorrect Authorization

The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

https://www.ibm.com/support/pages/node/7242925
Patch
Vendor Advisory