PT-2025-19902 · Ibm · Ibm I

Published 2025-05-07 · Updated 2025-07-04 · CVE-2025-3218

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions IBM i versions 7.2 through 7.6

Description The issue concerns authentication and authorization attacks due to incorrect validation processing in IBM i Netserver. A malicious actor could exploit these weaknesses, in conjunction with brute force authentication attacks or to bypass authority restrictions, to access the server.

Recommendations For IBM i versions 7.2 through 7.6, consider restricting access to the Netserver until a patch is available. As a temporary workaround, limit the use of brute force authentication attacks and authority restrictions to minimize the risk of exploitation.

Fix

Improper Certificate Validation

Weakness Enumeration

CWE-295

Related Identifiers

CVE-2025-3218

Affected Products

Ibm I

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2025-3218 · Security Note
• https://osv.dev/vulnerability/CVE-2025-3218 · Vendor Advisory
• https://ibm.com/support/pages/node/7232750 · Vendor Advisory, Patch
• https://t.me/cvenotify/121138 · Telegram Post
• https://twitter.com/cybercronai/status/1920135427320668662 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1919993822781559260 · Twitter Post
• https://t.me/cvedetector/24674 · Telegram Post
• https://twitter.com/CVEnew/status/1919948025180434912 · Twitter Post
• https://twitter.com/dailycve/status/1940956415096770717 · Twitter Post
• https://t.me/cvetracker/23221 · Telegram Post