PT-2025-34545 · Ibm · Ibm Jazz Foundation

Published 2025-08-24 · Updated 2025-12-18 · CVE-2025-36157

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: IBM Jazz Foundation versions 7.0.2 through 7.0.2 iFix035 IBM Jazz Foundation versions 7.0.3 through 7.0.3 iFix018 IBM Jazz Foundation versions 7.1.0 through 7.1.0 iFix004

Description: The vulnerability allows an unauthenticated remote attacker to update server property files, potentially enabling unauthorized actions.

Recommendations: IBM Jazz Foundation versions prior to 7.0.2 iFix035 should be updated. IBM Jazz Foundation versions prior to 7.0.3 iFix018 should be updated. IBM Jazz Foundation versions prior to 7.1.0 iFix004 should be updated.

Fix

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

BDU:2026-00228

CVE-2025-36157

Affected Products

Ibm Jazz Foundation

References · 15

• https://bdu.fstec.ru/vul/2026-00228 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-36157 · Security Note
• https://osv.dev/vulnerability/CVE-2025-36157 · Vendor Advisory
• https://ibm.com/support/pages/node/7242925 · Vendor Advisory, Patch
• https://t.me/CVEtracker/30789 · Telegram Post
• https://twitter.com/the_yellow_fall/status/1959803882252497137 · Twitter Post
• https://twitter.com/CCBalert/status/1959974141227929602 · Twitter Post
• https://twitter.com/CVEnew/status/1959450295869551028 · Twitter Post
• https://t.me/cveNotify/146228 · Telegram Post
• https://twitter.com/fridaysecurity/status/1959769188156973214 · Twitter Post
• https://t.me/cveNotify/133272 · Telegram Post
• https://t.me/pentestingnews/66833 · Telegram Post
• https://twitter.com/cracbot/status/1961383366890336708 · Twitter Post
• https://twitter.com/offseq/status/1959450764905972163 · Twitter Post
• https://twitter.com/CveFindCom/status/1959430691684245539 · Twitter Post