← CVE Intelligence

CVE-2025-36238

Power System Exposure of Sensitive System Information PUBLISHED

Description (CNA)

IBM PowerVM Hypervisor FW1110.00 through FW1110.03, FW1060.00 through FW1060.51, and FW950.00 through FW950.F0 could allow a local user with administration privileges to obtain sensitive information from a Virtual TPM through a series of PowerVM service procedures.

Affected (CNA)

Vendor / productVersions
IBM / PowerVM Hypervisoraffected FW1110.00 through FW1110.03; affected FW1060.00 through FW1060.51; affected FW950.00 through FW950.F0

CWE

CWE-497

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.