Skip to content
CVE PROGRAM SOURCE RECORD6.0 Medium

CVE-2025-36238

Power System Exposure of Sensitive System Information

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
ibm

Description

IBM PowerVM Hypervisor FW1110.00 through FW1110.03, FW1060.00 through FW1060.51, and FW950.00 through FW950.F0 could allow a local user with administration privileges to obtain sensitive information from a Virtual TPM through a series of PowerVM service procedures.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

IBM PowerVM Hypervisor

  • FW1110.00 to ≤ FW1110.03affected
  • FW1060.00 to ≤ FW1060.51affected
  • FW950.00 to ≤ FW950.F0affected

References