PT-2025-46922 · Ibm · Aix+3

Published

2025-11-13

·

Updated

2025-11-20

·

CVE-2025-36236

CVSS v3.1

9.1

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM VIOS versions 3.1 and 4.1
Description The NIM server service (formerly known as NIM master) – nimesis – may allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request to write arbitrary files on the system. The vulnerability involves the potential for unauthorized file writing through a directory traversal mechanism.
Recommendations IBM AIX version 7.2: At the moment, there is no information about a newer version that contains a fix for this vulnerability. IBM AIX version 7.3: At the moment, there is no information about a newer version that contains a fix for this vulnerability. IBM VIOS version 3.1: At the moment, there is no information about a newer version that contains a fix for this vulnerability. IBM VIOS version 4.1: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2025-36236

Affected Products

Aix
Ibm Aix
Network Installation Management
Vios