CVE-2025-36187

Published: Mar 25, 2026Modified: Jun 17, 2026

4.4

Vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Exploitability: 0.8 / Impact: 3.6

Source: NVD

Description

IBM Knowledge Catalog Standard Cartridge 5.0.0, 5.0.1, 5.0.2, 5.0.3, 5.1, 5.1.1, 5,1.2, 5.1.3, 5.2.0, 5.2.1 stores potentially sensitive information in log files that could be read by a local privileged user.

Affected (10)

Products: Ibm: Knowledge Catalog

Ibm

1 product

Knowledge Catalog

Configuration A

10 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ibm Knowledge Catalog	Version 5.0.0
Ibm Knowledge Catalog	Version 5.0.1
Ibm Knowledge Catalog	Version 5.0.2
Ibm Knowledge Catalog	Version 5.0.3
Ibm Knowledge Catalog	Version 5.1.1
Ibm Knowledge Catalog	Version 5.1.2
Ibm Knowledge Catalog	Version 5.1.3
Ibm Knowledge Catalog	Version 5.1
Ibm Knowledge Catalog	Version 5.2.0
Ibm Knowledge Catalog	Version 5.2.1

Running on/with	Platform Versions
Redhat Openshift	All versions

Related CWEs

CWE-532

Insertion of Sensitive Information into Log File

Information written to log files can be of a sensitive nature and give valuable guidance to an attacker or expose sensitive user information.

References (1)

https://www.ibm.com/support/pages/node/7267542

Source: psirt@us.ibm.com

Vendor Advisory

Timeline

No history available yet.