← Back

CVE-2025-36222

nvd nist
Published: Sep 11, 2025Modified: Jun 17, 2026

JSON object

Loading...
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD

Description

IBM Fusion 2.2.0 through 2.10.1, IBM Fusion HCI 2.2.0 through 2.10.0, and IBM Fusion HCI for watsonx 2.8.2 through 2.10.0 uses insecure default configurations that could expose AMQStreams without client authentication that could allow an attacker to perform unauthorized actions.

Affected (3)

Ibm
3 products
Storage Fusion
Storage Fusion Hci
Storage Fusion Hci For Watsonx
Configuration A
3 vulnerable
Vulnerable SoftwareAffected Versions
Storage Fusion
From 2.2.0 to 2.11.0
Storage Fusion Hci
From 2.2.0 to 2.11.0
Storage Fusion Hci For Watsonx
From 2.8.2 to 2.11.0

Related CWEs

CWE-1188
Initialization of a Resource with an Insecure Default
The product initializes or sets a resource with a default that is intended to be changed by the administrator, but the default is not secure.

References (1)

Source: psirt@us.ibm.com
Vendor Advisory

Timeline

No history available yet.