Kritik CVSS 9.8
CVE-2025-36222: Storage Fusion: güvenlik açığı
Açıklama (NVD)
IBM Fusion 2.2.0 through 2.10.1, IBM Fusion HCI 2.2.0 through 2.10.0, and IBM Fusion HCI for watsonx 2.8.2 through 2.10.0 uses insecure default configurations that could expose AMQStreams without client authentication that could allow an attacker to perform unauthorized actions.
Özet bilgiler
- Ürün
- Ibm Storage Fusion
- CVSS v3.1
- 9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - EPSS
- %0,39 (yüzdelik 33)
- CWE
- CWE-1188
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| ibm-storage-fusion | 2.2.0 | — | 2.11.0 |
| ibm-storage-fusion-hci | 2.2.0 | — | 2.11.0 |
| ibm-storage-fusion-hci-for-watsonx | 2.8.2 | — | 2.11.0 |