CVE-2025-36090: IBM Analytics Content Hub information disclosure
IBM Analytics Content Hub 2.0, 2.1, 2.2, and 2.3 could allow a remote attacker to obtain information about the application framework which could be used in reconnaissance to gather information for future attacks from a detailed technical error message.
Other sources
IBM Analytics Content Hub could allow a remote attacker to obtain information about the application framework which could be used in reconnaissance to gather information for future attacks from a detailed technical error message.
— IBM
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-36090?
CVE-2025-36090 is classified as a medium-severity vulnerability due to its potential to expose sensitive information.
How do I fix CVE-2025-36090?
To mitigate CVE-2025-36090, it is recommended to apply available security updates for IBM Analytics Content Hub version 2.3 or later.
What versions of IBM Analytics Content Hub are affected by CVE-2025-36090?
CVE-2025-36090 affects IBM Analytics Content Hub versions 2.0 to 2.3.
What is the impact of CVE-2025-36090?
CVE-2025-36090 can allow remote attackers to gain sensitive information about the application framework through detailed technical error messages.
Is there a workaround for CVE-2025-36090?
While there are no official workarounds, limiting access to the application logs can help reduce the risk associated with CVE-2025-36090.