CVE-2025-36222: IBM Fusion insecure default configuration
IBM Fusion 2.2.0 through 2.10.1, IBM Fusion HCI 2.2.0 through 2.10.0, and IBM Fusion HCI for watsonx 2.8.2 through 2.10.0 uses insecure default configurations that could expose AMQStreams without client authentication that could allow an attacker to perform unauthorized actions.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-36222?
The severity of CVE-2025-36222 is considered significant due to the use of insecure default configurations that allow an attacker to perform unauthorized actions.
How do I fix CVE-2025-36222?
To fix CVE-2025-36222, apply the appropriate patches provided by IBM for the affected versions of IBM Fusion and IBM Fusion HCI.
Which versions are affected by CVE-2025-36222?
CVE-2025-36222 affects IBM Fusion versions 2.2.0 through 2.10.1, IBM Fusion HCI versions 2.2.0 through 2.10.0, and IBM Fusion HCI for watsonx versions 2.8.2 through 2.10.0.
What actions can an attacker perform due to CVE-2025-36222?
An attacker exploiting CVE-2025-36222 can perform unauthorized actions on AMQStreams due to the lack of client authentication.
Is remote access possible with CVE-2025-36222?
Yes, remote access to the affected services is possible due to insecure default configurations outlined in CVE-2025-36222.