PT-2025-35945 · Ibm · Ibm Jazz Foundation

Published 2025-09-04 · Updated 2026-01-09 · CVE-2025-25048

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions IBM Jazz Foundation versions 7.0.2 through 7.0.2 iFix033 IBM Jazz Foundation versions 7.0.3 through 7.0.3 iFix012 IBM Jazz Foundation versions 7.1.0 through 7.1.0 iFix002

Description An authenticated user may be able to upload files to the system due to improper neutralization of sequences that can resolve to a restricted directory.

Recommendations Update IBM Jazz Foundation to a version later than 7.0.2 iFix033. Update IBM Jazz Foundation to a version later than 7.0.3 iFix012. Update IBM Jazz Foundation to a version later than 7.1.0 iFix002.

Fix

Relative Path Traversal

Weakness Enumeration

CWE-23

Related Identifiers

CVE-2025-25048

Affected Products

Ibm Jazz Foundation

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-25048 · Security Note
• https://osv.dev/vulnerability/CVE-2025-25048 · Vendor Advisory
• https://t.me/cveNotify/148171 · Telegram Post
• https://twitter.com/CVEnew/status/1963644663975338432 · Twitter Post
• https://t.me/cveNotify/134273 · Telegram Post
• https://t.me/cveNotify/144566 · Telegram Post
• https://ibm.com/support/pages/node/7244014 · Vendor Advisory, Patch