PT-2025-23047 · Ibm · Ibm Security Guardium

CVE-2025-25029 · Publicado 2025-05-27 · Atualizado 2025-06-04

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:L/Au:S/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Security Guardium version 12.0

Description The issue allows a privileged user to download any file on the system due to improper escaping of input.

Recommendations For IBM Security Guardium version 12.0, consider restricting file access privileges to minimize the risk of exploitation until a patch is available.

Correção

LPE

Improper Encoding or Escaping of Output

Enumeração de Fraquezas

CWE-116

Identificadores relacionados

BDU:2025-06323

CVE-2025-25029

Produtos afetados

Ibm Security Guardium

Referências · 8

• https://t.me/cvetracker/24784 · Publicação no Telegram
• https://t.me/cvenotify/123790 · Publicação no Telegram
• https://twitter.com/CVEnew/status/1927558828343595265 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2025-25029 · Nota de Segurança
• https://t.me/cvenotify/124598 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2025-25029 · Aviso do Fabricante
• https://ibm.com/support/pages/node/7234827 · Aviso do Fabricante, Correção
• https://bdu.fstec.ru/vul/2025-06323 · Nota de Segurança