← CVE Intelligence

CVE-2025-12985

License Service: Privilege escalation vulnerability PUBLISHED

Description (CNA)

IBM Licensing Operator incorrectly assigns privileges to security critical files which could allow a local root escalation inside a container running the IBM Licensing Operator image.

Affected (CNA)

Vendor / productVersions
IBM / IBM Licensing Operatoraffected 9.0.0; affected 9.0.1; affected 9.1.0; affected 9.2.0

CWE

CWE-732

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.