CVE-2025-36020 - Vulnerability Details - OpenCVE

IBM Guardium Data Protection could allow a remote attacker to obtain sensitive information due to cleartext transmission of sensitive credential information.

No CVSS v4.0

Attack Vector Network

Attack Complexity High

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Vendors	Products
Ibm	Guardium Data Protection Security Guardium

Configuration 1 [-]

cpe:2.3:a:ibm:guardium_data_protection:11.5:*:*:*:*:*:*:*

No data.

References

Link	Providers
https://www.ibm.com/support/pages/node/7241547

History

Wed, 13 Aug 2025 18:30:00 +0000

Type	Values Removed	Values Added
First Time appeared		Ibm guardium Data Protection
CPEs		cpe:2.3:a:ibm:guardium_data_protection:11.5:::::::*
Vendors & Products		Ibm guardium Data Protection

Wed, 06 Aug 2025 15:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Wed, 06 Aug 2025 14:45:00 +0000

Type	Values Removed	Values Added
Description		IBM Guardium Data Protection could allow a remote attacker to obtain sensitive information due to cleartext transmission of sensitive credential information.
Title		IBM Guardium Data Protection information disclosure
First Time appeared		Ibm Ibm security Guardium
Weaknesses		CWE-319
CPEs		cpe:2.3:a:ibm:security_guardium:11.5:::::::*
Vendors & Products		Ibm Ibm security Guardium
References		https://www.ibm.com/support/pages/node/7241547
Metrics		cvssV3_1 `{'score': 5.9, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'}`

MITRE

Status: PUBLISHED

Assigner: ibm

Published: 2025-08-06T14:28:45.780Z

Updated: 2025-10-22T18:48:49.556Z

Reserved: 2025-04-15T21:16:08.834Z

Link: CVE-2025-36020

Vulnrichment

Updated: 2025-08-06T14:58:19.905Z

NVD

Status : Analyzed

Published: 2025-08-06T15:15:31.830

Modified: 2025-08-13T18:21:56.600

Link: CVE-2025-36020

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2025-36020", "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "state": "PUBLISHED", "assignerShortName": "ibm", "dateReserved": "2025-04-15T21:16:08.834Z", "datePublished": "2025-08-06T14:28:45.780Z", "dateUpdated": "2025-10-22T18:48:49.556Z"}, "containers": {"cna": {"affected": [{"cpes": ["cpe:2.3:a:ibm:security_guardium:11.5:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "product": "Guardium Data Protection", "vendor": "IBM", "versions": [{"status": "affected", "version": "11.5"}, {"status": "affected", "version": "12.0"}, {"status": "affected", "version": "12.1"}]}], "credits": [{"lang": "en", "type": "finder", "value": "Pedro Cornago Lopez @ Nordea Bank Abp"}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "IBM Guardium Data Protection could allow a remote attacker to obtain sensitive information due to cleartext transmission of sensitive credential information."}], "value": "IBM Guardium Data Protection could allow a remote attacker to obtain sensitive information due to cleartext transmission of sensitive credential information."}], "metrics": [{"cvssV3_1": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-319", "description": "CWE-319", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm", "dateUpdated": "2025-10-22T18:48:49.556Z"}, "references": [{"tags": ["vendor-advisory", "patch"], "url": "https://www.ibm.com/support/pages/node/7241547"}], "solutions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "IBM encourages customers to update their systems promptly.<br><br> <br> Product Versions   Fix<br>IBM Guardium Data Protection 11.5 <a target=\"_blank\" rel=\"nofollow\" href=\"https://www.ibm.com/support/fixcentral/swg/quickorder?parent=IBM%20Security&product=ibm/Information+Management/InfoSphere+Guardium&release=11.5&platform=Linux\">https://www.ibm.com/support/fixcentral/swg/quickorder?parent=IBM%20Security&product=ibm/Informat...<br></a>IBM Guardium Data Protection <span style=\"background-color: rgb(255, 255, 255);\">12.0 <a target=\"_blank\" rel=\"nofollow\" href=\"https://www.ibm.com/support/fixcentral/swg/quickorder?parent=IBM%20Security&product=ibm/Information+Management/InfoSphere+Guardium&release=12.0&platform=Linux&function=fixId&fixids=SqlGuard_12.0p45_Bundle&includeSupersedes=0&source=fc\">https://www.ibm.com/support/fixcentral/swg/quickorder?parent=IBM%20Security&product=ibm/Informat...</a><br>IBM Guardium Data Protection <span style=\"background-color: rgb(255, 255, 255);\">12.1 <a target=\"_blank\" rel=\"nofollow\" href=\"https://www.ibm.com/support/fixcentral/swg/quickorder?parent=IBM%20Security&product=ibm/Information+Management/InfoSphere+Guardium&release=12.1&platform=Linux&function=fixId&fixids=SqlGuard_12.0p125_Bundle&includeSupersedes=0&source=fc\">https://www.ibm.com/support/fixcentral/swg/quickorder?parent=IBM%20Security&product=ibm/Informat...</a></span></span><br>"}], "value": "IBM encourages customers to update their systems promptly.\n\n \n Product Versions \u00a0 Fix\nIBM Guardium Data Protection 11.5 https://www.ibm.com/support/fixcentral/swg/quickorder?parent=IBM%20Security&product=ibm/Informat...\n https://www.ibm.com/support/fixcentral/swg/quickorder IBM Guardium Data Protection 12.0\u00a0 https://www.ibm.com/support/fixcentral/swg/quickorder?parent=IBM%20Security&product=ibm/Informat... https://www.ibm.com/support/fixcentral/swg/quickorder \nIBM Guardium Data Protection 12.1\u00a0 https://www.ibm.com/support/fixcentral/swg/quickorder?parent=IBM%20Security&product=ibm/Informat... https://www.ibm.com/support/fixcentral/swg/quickorder"}], "source": {"discovery": "UNKNOWN"}, "title": "IBM Guardium Data Protection information disclosure", "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-08-06T14:58:17.033684Z", "id": "CVE-2025-36020", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-08-06T14:58:31.431Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-36020", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-08-06T14:58:17.033684Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-08-06T14:58:19.905Z"}}], "cna": {"title": "IBM Guardium Data Protection information disclosure", "source": {"discovery": "UNKNOWN"}, "credits": [{"lang": "en", "type": "finder", "value": "Pedro Cornago Lopez @ Nordea Bank Abp"}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.9, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"cpes": ["cpe:2.3:a:ibm:security_guardium:11.5:*:*:*:*:*:*:*"], "vendor": "IBM", "product": "Guardium Data Protection", "versions": [{"status": "affected", "version": "11.5"}, {"status": "affected", "version": "12.0"}, {"status": "affected", "version": "12.1"}], "defaultStatus": "unaffected"}], "solutions": [{"lang": "en", "value": "IBM encourages customers to update their systems promptly.\n\n \n Product Versions \u00a0 Fix\nIBM Guardium Data Protection 11.5 https://www.ibm.com/support/fixcentral/swg/quickorder?parent=IBM%20Security&product=ibm/Informat...\n https://www.ibm.com/support/fixcentral/swg/quickorder IBM Guardium Data Protection 12.0\u00a0 https://www.ibm.com/support/fixcentral/swg/quickorder?parent=IBM%20Security&product=ibm/Informat... https://www.ibm.com/support/fixcentral/swg/quickorder \nIBM Guardium Data Protection 12.1\u00a0 https://www.ibm.com/support/fixcentral/swg/quickorder?parent=IBM%20Security&product=ibm/Informat... https://www.ibm.com/support/fixcentral/swg/quickorder", "supportingMedia": [{"type": "text/html", "value": "IBM encourages customers to update their systems promptly.<br><br> <br> Product Versions   Fix<br>IBM Guardium Data Protection 11.5 <a target=\"_blank\" rel=\"nofollow\" href=\"https://www.ibm.com/support/fixcentral/swg/quickorder?parent=IBM%20Security&product=ibm/Information+Management/InfoSphere+Guardium&release=11.5&platform=Linux\">https://www.ibm.com/support/fixcentral/swg/quickorder?parent=IBM%20Security&product=ibm/Informat...<br></a>IBM Guardium Data Protection <span style=\"background-color: rgb(255, 255, 255);\">12.0 <a target=\"_blank\" rel=\"nofollow\" href=\"https://www.ibm.com/support/fixcentral/swg/quickorder?parent=IBM%20Security&product=ibm/Information+Management/InfoSphere+Guardium&release=12.0&platform=Linux&function=fixId&fixids=SqlGuard_12.0p45_Bundle&includeSupersedes=0&source=fc\">https://www.ibm.com/support/fixcentral/swg/quickorder?parent=IBM%20Security&product=ibm/Informat...</a><br>IBM Guardium Data Protection <span style=\"background-color: rgb(255, 255, 255);\">12.1 <a target=\"_blank\" rel=\"nofollow\" href=\"https://www.ibm.com/support/fixcentral/swg/quickorder?parent=IBM%20Security&product=ibm/Information+Management/InfoSphere+Guardium&release=12.1&platform=Linux&function=fixId&fixids=SqlGuard_12.0p125_Bundle&includeSupersedes=0&source=fc\">https://www.ibm.com/support/fixcentral/swg/quickorder?parent=IBM%20Security&product=ibm/Informat...</a></span></span><br>", "base64": false}]}], "references": [{"url": "https://www.ibm.com/support/pages/node/7241547", "tags": ["vendor-advisory", "patch"]}], "x_generator": {"engine": "Vulnogram 0.2.0"}, "descriptions": [{"lang": "en", "value": "IBM Guardium Data Protection could allow a remote attacker to obtain sensitive information due to cleartext transmission of sensitive credential information.", "supportingMedia": [{"type": "text/html", "value": "IBM Guardium Data Protection could allow a remote attacker to obtain sensitive information due to cleartext transmission of sensitive credential information.", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-319", "description": "CWE-319"}]}], "providerMetadata": {"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm", "dateUpdated": "2025-10-22T18:48:49.556Z"}}}, "cveMetadata": {"cveId": "CVE-2025-36020", "state": "PUBLISHED", "dateUpdated": "2025-10-22T18:48:49.556Z", "dateReserved": "2025-04-15T21:16:08.834Z", "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "datePublished": "2025-08-06T14:28:45.780Z", "assignerShortName": "ibm"}, "dataVersion": "5.1"}