MEDIUM🇵🇱 Wersja polska

CVE-2025-36238

CVSS 6.0v3.1pub. 2026-02-02upd. 2026-02-19

IBM PowerVM Hypervisor FW1110.00 through FW1110.03, FW1060.00 through FW1060.51, and FW950.00 through FW950.F0 could allow a local user with administration privileges to obtain sensitive information from a Virtual TPM through a series of PowerVM service procedures.

CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

  • IBM Powervm Hypervisor

    OS
    Ibm
    fw1060.00fw1060.10fw1060.12fw1060.20fw1060.21fw1060.40fw1060.41fw1060.50fw1060.51fw1110.00fw1110.01fw1110.03fw950.00fw950.10fw950.11+ 19 more
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2023-30438CRITICAL9.3PL ✓same product

IBM PowerVM: przełamanie izolacji partycji logicznych na Power9/Power10

CVE-2021-38917CRITICAL9.1PL ✓same product

IBM PowerVM Hypervisor — nieautoryzowany odczyt i zapis pamięci hosta przez FSP

CVE-2021-38923CRITICAL9.1PL ✓same product

IBM PowerVM Hypervisor: ucieczka z VM przez zduplikowane WWPNy

CVE-2021-38918HIGH7.5same product

IBM PowerVM Hypervisor FW860, FW940, FW950, and FW1010, through a specific sequence of VM management operation...

CVE-2025-36035MEDIUM6.7same product

IBM PowerVM Hypervisor FW950.00 through FW950.E0, FW1050.00 through FW1050.50, and FW1060.00 through FW1060.40...