← Back

CVE-2025-36244

nvd nist
Published: Sep 16, 2025Modified: Jun 17, 2026

JSON object

Loading...
5.5
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Exploitability: 1.8 / Impact: 3.6
Source: NVD

Description

IBM AIX 7.2, 7.3, IBM VIOS 3.1, and 4.1, when configured to use Kerberos network authentication, could allow a local user to write to files on the system with root privileges due to improper initialization of critical variables.

Affected (4)

Products: Ibm: Aix, Vios
Ibm
2 products
Aix
Vios
Configuration A
4 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Ibm
Aix
Version 7.2
Aix
Version 7.3
Ibm
Vios
Version 3.1
Vios
Version 4.1
Running on/withPlatform Versions
Ibm
Aix
All versions

Related CWEs

CWE-454
External Initialization of Trusted Variables or Data Stores
The product initializes critical internal variables or data stores using inputs that can be modified by untrusted actors.

References (1)

Source: psirt@us.ibm.com
Vendor Advisory

Timeline

No history available yet.