PT-2026-3631 · Ibm · Ibm Applinx

CVE-2025-36418 · Publicado 2026-01-20 · Atualizado 2026-01-20

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions IBM ApplinX version 11.1

Description IBM ApplinX version 11.1 contains a privilege escalation issue stemming from inadequate verification of JSON Web Tokens (JWT). An attacker could potentially create or alter a JWT to assume the identity of another user or gain elevated privileges. The JWT tokens are not properly validated, allowing for manipulation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

Improper Verification of Cryptographic Signature

Enumeração de Fraquezas

CWE-347

Identificadores relacionados

CVE-2025-36418

Produtos afetados

Ibm Applinx

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-36418 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2025-36418 · Aviso do Fabricante
• https://twitter.com/CVEnew/status/2013650048597266711 · Publicação no Twitter
• https://twitter.com/VulmonFeeds/status/2013728758746775908 · Publicação no Twitter
• https://ibm.com/support/pages/node/7257446 · Correção, Aviso do Fabricante