← CVE Intelligence

CVE-2025-36373

Incorrect administrative access control in IBM DataPower Gateway PUBLISHED

Description (CNA)

IBM DataPower Gateway 10.6CD 10.6.1.0 through 10.6.5.0 and IBM DataPower Gateway 10.5.0 10.5.0.0 through 10.5.0.20 and IBM DataPower Gateway 10.6.0 10.6.0.0 through 10.6.0.8 IBM DataPower Gateway could disclose sensitive system information from other domains to an administrative user.

Affected (CNA)

Vendor / productVersions
IBM / DataPower Gateway 10.6CDaffected 10.6.1.0 through 10.6.5.0
IBM / DataPower Gateway 10.5.0affected 10.5.0.0 through 10.5.0.20
IBM / DataPower Gateway 10.6.0affected 10.6.0.0 through 10.6.0.8

CWE

CWE-497

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.