CVEvulnerability

CVE-2025-36238

6.0 MEDIUM Published 2026-02-02 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2026-02-02
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.0 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
Weaknesses
CWE-497

Description

IBM PowerVM Hypervisor FW1110.00 through FW1110.03, FW1060.00 through FW1060.51, and FW950.00 through FW950.F0 could allow a local user with administration privileges to obtain sensitive information from a Virtual TPM through a series of PowerVM service procedures.

Affected configurations

• ibm powervm hypervisor fw950.00 • ibm powervm hypervisor fw950.10 • ibm powervm hypervisor fw950.11 • ibm powervm hypervisor fw950.20 • ibm powervm hypervisor fw950.30 • ibm powervm hypervisor fw950.40 • ibm powervm hypervisor fw950.50 • ibm powervm hypervisor fw950.60 • ibm powervm hypervisor fw950.70 • ibm powervm hypervisor fw950.71 • ibm powervm hypervisor fw950.80 • ibm powervm hypervisor fw950.90 • ibm powervm hypervisor fw950.a0 • ibm powervm hypervisor fw950.b0 • ibm powervm hypervisor fw950.c0 • ibm powervm hypervisor fw950.c1 • ibm powervm hypervisor fw950.c2 • ibm powervm hypervisor fw950.d0 • ibm powervm hypervisor fw950.d1 • ibm powervm hypervisor fw950.e0 • ibm powervm hypervisor fw950.e1 • ibm powervm hypervisor fw950.f0 • ibm powervm hypervisor fw1060.00 • ibm powervm hypervisor fw1060.10 • ibm powervm hypervisor fw1060.12 • ibm powervm hypervisor fw1060.20 • ibm powervm hypervisor fw1060.21 • ibm powervm hypervisor fw1060.40 • ibm powervm hypervisor fw1060.41 • ibm powervm hypervisor fw1060.50 • ibm powervm hypervisor fw1060.51 • ibm powervm hypervisor fw1110.00 • ibm powervm hypervisor fw1110.01 • ibm powervm hypervisor fw1110.03

Related

Weakness · CWE (1)

  • CWE-497 Exposure of Sensitive System Information to an Unauthorized Control Sphere weakness

References