← Back

CVE-2025-36351

nvd nist
Published: Sep 29, 2025Modified: Oct 3, 2025

JSON object

Loading...
4.3
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Exploitability: 2.8 / Impact: 1.4
Source: psirt@us.ibm.com (Secondary)

Description

IBM License Metric Tool 9.2.0 through 9.2.40 could allow an authenticated user to bypass access controls in the REST API interface and perform unauthorized actions.

Affected (1)

Ibm
1 product
License Metric Tool
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
License Metric Tool
From 9.2.0 to 9.2.41

Related CWEs

CWE-284
Improper Access Control
The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

References (1)

Source: psirt@us.ibm.com
Vendor Advisory

Timeline

No history available yet.