PT-2025-25217 · Ibm · Ibm Security Guardium

Published 2025-06-11 · Updated 2025-08-13 · CVE-2025-3473

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:L/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IBM Security Guardium version 12.1

Description The issue allows a local privileged user to escalate their privileges to root due to insecure inherited permissions created by the program.

Recommendations For IBM Security Guardium version 12.1, consider restricting the permissions of privileged users to minimize the risk of exploitation until a patch is available.

Fix

LPE

Weakness Enumeration

CWE-277

Related Identifiers

BDU:2025-09731

CVE-2025-3473

Affected Products

Ibm Security Guardium

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-3473 · Security Note
• https://bdu.fstec.ru/vul/2025-09731 · Security Note
• https://osv.dev/vulnerability/CVE-2025-3473 · Vendor Advisory
• https://ibm.com/support/pages/node/7236356 · Vendor Advisory, Patch
• https://t.me/cvetracker/26028 · Telegram Post
• https://t.me/cveNotify/132049 · Telegram Post
• https://twitter.com/CVEnew/status/1932813589338845606 · Twitter Post