← CVE Intelligence

CVE-2025-36157

IBM Engineering Lifecycle Management incorrect authorization PUBLISHED

Description (CNA)

IBM Jazz Foundation 7.0.2 to 7.0.2 iFix035, 7.0.3 to 7.0.3 iFix018, and 7.1.0 to 7.1.0 iFix004 could allow an unauthenticated remote attacker to update server property files that would allow them to perform unauthorized actions.

Affected (CNA)

Vendor / productVersions
IBM / Engineering Lifecycle Managementaffected 7.0.2 through 7.0.2 iFix035; affected 7.0.3 through 7.0.3 iFix018; affected 7.1.0 through 7.1.0 iFix004

CWE

CWE-863

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.