9.8
/ 10
CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
IBM Jazz Foundation 7.0.2 to 7.0.2 iFix035, 7.0.3 to 7.0.3 iFix018, and 7.1.0 to 7.1.0 iFix004 could allow an unauthenticated remote attacker to update server property files that would allow them to perform unauthorized actions.
Basic Information
ID
CVE-2025-36157
Source
ibm
Published
Aug 24, 2025 at 01:14
Affected Product
Vendor
IBM
Product
Jazz Foundation
Version
7.0.2
Affected Versions
IBM Jazz Foundation 7.0.2
IBM Jazz Foundation 7.0.3
IBM Jazz Foundation 7.1.0
IBM Jazz Foundation 7.0.3
IBM Jazz Foundation 7.1.0