{"id":"CVE-2025-36238","state":"PUBLISHED","title":"Power System Exposure of Sensitive System Information","description":"IBM PowerVM Hypervisor FW1110.00 through FW1110.03, FW1060.00 through FW1060.51, and FW950.00 through FW950.F0 could allow a local user with administration privileges to obtain sensitive information from a Virtual TPM through a series of PowerVM service procedures.","publishedAt":"2026-02-02T21:54:27.397Z","updatedAt":"2026-02-04T16:53:50.712Z","severity":{"score":6,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N","source":"ibm"},"assigner":"ibm","products":["IBM PowerVM Hypervisor"],"affected":[{"vendor":"IBM","product":"PowerVM Hypervisor","versions":[{"version":"FW1110.00","status":"affected","lessThanOrEqual":"FW1110.03","versionType":"semver"},{"version":"FW1060.00","status":"affected","lessThanOrEqual":"FW1060.51","versionType":"semver"},{"version":"FW950.00","status":"affected","lessThanOrEqual":"FW950.F0","versionType":"semver"}],"cpes":["cpe:2.3:a:ibm:powervm_hypervisor:fw1110.00:*:*:*:*:*:*:*","cpe:2.3:a:ibm:powervm_hypervisor:fw1110.00.0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:powervm_hypervisor:fw1110.03:*:*:*:*:*:*:*","cpe:2.3:a:ibm:powervm_hypervisor:fw1110.03.0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:powervm_hypervisor:fw1060.00:*:*:*:*:*:*:*","cpe:2.3:a:ibm:powervm_hypervisor:fw1060.00.0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:powervm_hypervisor:fw1060.51:*:*:*:*:*:*:*","cpe:2.3:a:ibm:powervm_hypervisor:fw1060.51.0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:powervm_hypervisor:fw950.00:*:*:*:*:*:*:*","cpe:2.3:a:ibm:powervm_hypervisor:fw950.00.0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:powervm_hypervisor:fw950.f0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:powervm_hypervisor:fw950.f0.0:*:*:*:*:*:*:*"]}],"references":["https://www.ibm.com/support/pages/node/7257556"],"weaknesses":["CWE-497"],"ingestedAt":"2026-10-29T20:09:03.054Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/36xxx/CVE-2025-36238.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2025-36238","state":"PUBLISHED","datePublished":"2026-02-02T21:54:27.397Z","dateUpdated":"2026-02-04T16:53:50.712Z","assignerShortName":"ibm","assignerOrgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","dateReserved":"2025-04-15T21:16:42.825Z"},"containers":{"cna":{"title":"Power System Exposure of Sensitive System Information","descriptions":[{"lang":"en","value":"IBM PowerVM Hypervisor FW1110.00 through FW1110.03, FW1060.00 through FW1060.51, and FW950.00 through FW950.F0 could allow a local user with administration privileges to obtain sensitive information from a Virtual TPM through a series of PowerVM service procedures."}],"affected":[{"vendor":"IBM","product":"PowerVM Hypervisor","versions":[{"version":"FW1110.00","status":"affected","lessThanOrEqual":"FW1110.03","versionType":"semver"},{"version":"FW1060.00","status":"affected","lessThanOrEqual":"FW1060.51","versionType":"semver"},{"version":"FW950.00","status":"affected","lessThanOrEqual":"FW950.F0","versionType":"semver"}],"cpes":["cpe:2.3:a:ibm:powervm_hypervisor:fw1110.00:*:*:*:*:*:*:*","cpe:2.3:a:ibm:powervm_hypervisor:fw1110.00.0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:powervm_hypervisor:fw1110.03:*:*:*:*:*:*:*","cpe:2.3:a:ibm:powervm_hypervisor:fw1110.03.0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:powervm_hypervisor:fw1060.00:*:*:*:*:*:*:*","cpe:2.3:a:ibm:powervm_hypervisor:fw1060.00.0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:powervm_hypervisor:fw1060.51:*:*:*:*:*:*:*","cpe:2.3:a:ibm:powervm_hypervisor:fw1060.51.0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:powervm_hypervisor:fw950.00:*:*:*:*:*:*:*","cpe:2.3:a:ibm:powervm_hypervisor:fw950.00.0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:powervm_hypervisor:fw950.f0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:powervm_hypervisor:fw950.f0.0:*:*:*:*:*:*:*"]}],"references":[{"url":"https://www.ibm.com/support/pages/node/7257556","tags":["vendor-advisory","patch"]}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"NONE","baseScore":6,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"HIGH","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-497","description":"CWE-497 Exposure of Sensitive System Information to an Unauthorized Control Sphere","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"ibm","orgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","dateUpdated":"2026-02-02T21:56:40.107Z"},"solutions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"

IBM strongly recommends addressing the vulnerability now by upgrading to IBM Concert Software 2.2.0

Download IBM Concert Software 2.2.0 from Container software library section of IBM Entitled Registry (ICR) and follow installation instructions depending on the type of deployment.


"}],"value":"IBM strongly recommends addressing the vulnerability now by upgrading to IBM Concert Software 2.2.0\n\nDownload IBM Concert Software 2.2.0 from Container software library section of IBM Entitled Registry ( ICR https://myibm.ibm.com/products-services/containerlibrary ) and follow installation instructions https://www.ibm.com/docs/en/concert  depending on the type of deployment."}],"x_generator":{"engine":"ibm-cvegen"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-02-04T15:46:43.301075Z","id":"CVE-2025-36238","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-02-04T16:53:50.712Z"}}]}}}