CVE-2025-36367
BaseFortify
Publication date: 2025-11-01
Last updated on: 2025-11-05
Assigner: IBM Corporation
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| ibm | i | 7.2 |
| ibm | i | 7.3 |
| ibm | i | 7.4 |
| ibm | i | 7.5 |
| ibm | i | 7.6 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-862 | The product does not perform an authorization check when an actor attempts to access a resource or perform an action. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability in IBM i versions 7.2 through 7.6 is due to an invalid authorization check in IBM i SQL services. It allows a malicious actor to escalate privileges by using the elevated privileges of another user profile, potentially gaining root access to the host operating system.
How can this vulnerability impact me? :
The vulnerability can allow an attacker to gain root-level access to the host operating system by exploiting privilege escalation. This can lead to full control over the system, compromising confidentiality, integrity, and availability of data and services.