CVE-2025-36157

ibm jazz foundation

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2025-36157

Katalog CVE

CVSS 9.1 · Critical EPSS 0,64%

Kerentanan Incorrect Authorization pada ibm jazz foundation. Skor CVSS 3.1 9.1 (Critical) menurut NVD.

Deskripsi (NVD)

IBM Jazz Foundation 7.0.2 to 7.0.2 iFix035, 7.0.3 to 7.0.3 iFix018, and 7.1.0 to 7.1.0 iFix004 could allow an unauthenticated remote attacker to update server property files that would allow them to perform unauthorized actions.

Rincian

Terbit di NVD
24 Agustus 2025
Terakhir diubah
17 Juni 2026
Status NVD
Analyzed
CVSS 3.1
9.1 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-863: Incorrect Authorization
EPSS (30 hari)
0,64% peluang dieksploitasi; lebih tinggi dari 49,1% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
ibm jazz foundation Versi 7.0.2
ibm jazz foundation Versi 7.0.2 ifix001
ibm jazz foundation Versi 7.0.2 ifix002
ibm jazz foundation Versi 7.0.2 ifix003
ibm jazz foundation Versi 7.0.2 ifix004
ibm jazz foundation Versi 7.0.2 ifix005
ibm jazz foundation Versi 7.0.2 ifix006
ibm jazz foundation Versi 7.0.2 ifix007
ibm jazz foundation Versi 7.0.2 ifix008a
ibm jazz foundation Versi 7.0.2 ifix009
ibm jazz foundation Versi 7.0.2 ifix010
ibm jazz foundation Versi 7.0.2 ifix011
ibm jazz foundation Versi 7.0.2 ifix012
ibm jazz foundation Versi 7.0.2 ifix013
ibm jazz foundation Versi 7.0.2 ifix014
ibm jazz foundation Versi 7.0.2 ifix016
ibm jazz foundation Versi 7.0.2 ifix017
ibm jazz foundation Versi 7.0.2 ifix018
ibm jazz foundation Versi 7.0.2 ifix020a
ibm jazz foundation Versi 7.0.2 ifix021
ibm jazz foundation Versi 7.0.2 ifix022
ibm jazz foundation Versi 7.0.2 ifix023
ibm jazz foundation Versi 7.0.2 ifix024
ibm jazz foundation Versi 7.0.2 ifix025
ibm jazz foundation Versi 7.0.2 ifix026a
ibm jazz foundation Versi 7.0.2 ifix027
ibm jazz foundation Versi 7.0.2 ifix028
ibm jazz foundation Versi 7.0.2 ifix029
ibm jazz foundation Versi 7.0.2 ifix030
ibm jazz foundation Versi 7.0.2 ifix031
ibm jazz foundation Versi 7.0.2 ifix032
ibm jazz foundation Versi 7.0.2 ifix033
ibm jazz foundation Versi 7.0.2 ifix034
ibm jazz foundation Versi 7.0.2 ifix035
ibm jazz foundation Versi 7.0.3
ibm jazz foundation Versi 7.0.3 ifix001
ibm jazz foundation Versi 7.0.3 ifix002
ibm jazz foundation Versi 7.0.3 ifix003
ibm jazz foundation Versi 7.0.3 ifix004
ibm jazz foundation Versi 7.0.3 ifix005
ibm jazz foundation Versi 7.0.3 ifix006
ibm jazz foundation Versi 7.0.3 ifix007
ibm jazz foundation Versi 7.0.3 ifix008
ibm jazz foundation Versi 7.0.3 ifix009
ibm jazz foundation Versi 7.0.3 ifix010
ibm jazz foundation Versi 7.0.3 ifix011
ibm jazz foundation Versi 7.0.3 ifix012
ibm jazz foundation Versi 7.0.3 ifix013
ibm jazz foundation Versi 7.0.3 ifix014
ibm jazz foundation Versi 7.0.3 ifix015
ibm jazz foundation Versi 7.0.3 ifix016
ibm jazz foundation Versi 7.0.3 ifix017
ibm jazz foundation Versi 7.0.3 ifix018
ibm jazz foundation Versi 7.1.0
ibm jazz foundation Versi 7.1.0 ifix001
ibm jazz foundation Versi 7.1.0 ifix002
ibm jazz foundation Versi 7.1.0 ifix003
ibm jazz foundation Versi 7.1.0 ifix004

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:11 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.