CVEvulnerability

CVE-2025-36096

8.1 HIGH Published 2025-11-13 Modified 2026-10-18 Official page ↗
Status
Analyzed
Published
2025-11-13
Last modified
2026-10-18
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.0 CRITICAL — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS 3.1 ([email protected])
8.1 HIGH — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-522

Description

IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 stores NIM private keys used in NIM environments in an insecure way which is susceptible to unauthorized access by an attacker using man in the middle techniques.

Affected configurations

• ibm vios 3.1.0 • ibm vios 4.1.0 • ibm aix 7.2 • ibm aix 7.3

Related

Weakness · CWE (1)

  • CWE-522 Insufficiently Protected Credentials weakness

References