VULNERABILITY INTELLIGENCE

CVE-2025-36244

CVSS score7.4 HIGH
EPSS probability0.12%
CISA KEVNot currently listed
Published2025-09-16
Last modified2026-10-18
CVSS vectorCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

IBM AIX 7.2, 7.3, IBM VIOS 3.1, and 4.1, when configured to use Kerberos network authentication, could allow a local user to write to files on the system with root privileges due to improper initialization of critical variables.

Weakness classification

  • CWE-454: External Initialization of Trusted Variables or Data Stores

Primary references