IBM PowerVM Hypervisor up to FW950.F0/FW1060.51/FW1110.03 PowerVM Service information expsure

Summaryinfo

A vulnerability, which was classified as problematic, was found in IBM PowerVM Hypervisor up to FW950.F0/FW1060.51/FW1110.03. Affected by this issue is some unknown functionality of the component PowerVM Service. Executing a manipulation can lead to information expsure. This vulnerability appears as CVE-2025-36238. The attack requires local access. There is no available exploit. You should upgrade the affected component.

Detailsinfo

A vulnerability classified as problematic was found in IBM PowerVM Hypervisor up to FW950.F0/FW1060.51/FW1110.03. This vulnerability affects some unknown functionality of the component PowerVM Service. The manipulation with an unknown input leads to a information expsure vulnerability. The CWE definition for the vulnerability is CWE-497. The product does not properly prevent sensitive system-level information from being accessed by unauthorized actors who do not have the same level of access to the underlying system as the product does. As an impact it is known to affect confidentiality. CVE summarizes:

IBM PowerVM Hypervisor FW1110.00 through FW1110.03, FW1060.00 through FW1060.51, and FW950.00 through FW950.F0 could allow a local user with administration privileges to obtain sensitive information from a Virtual TPM through a series of PowerVM service procedures.

The advisory is shared for download at ibm.com. This vulnerability was named CVE-2025-36238 since 04/15/2025. The exploitation appears to be easy. The attack needs to be approached locally. Additional levels of successful authentication are necessary for exploitation. There are neither technical details nor an exploit publicly available. The MITRE ATT&CK project declares the attack technique as T1592.

Upgrading eliminates this vulnerability.

Once again VulDB remains the best source for vulnerability data.

Productinfo

Vendor

• IBM

Name

• PowerVM Hypervisor

Version

• FW950.F0
• FW1060.0
• FW1060.1
• FW1060.2
• FW1060.3
• FW1060.4
• FW1060.5
• FW1060.6
• FW1060.7
• FW1060.8
• FW1060.9
• FW1060.10
• FW1060.11
• FW1060.12
• FW1060.13
• FW1060.14
• FW1060.15
• FW1060.16
• FW1060.17
• FW1060.18
• FW1060.19
• FW1060.20
• FW1060.21
• FW1060.22
• FW1060.23
• FW1060.24
• FW1060.25
• FW1060.26
• FW1060.27
• FW1060.28
• FW1060.29
• FW1060.30
• FW1060.31
• FW1060.32
• FW1060.33
• FW1060.34
• FW1060.35
• FW1060.36
• FW1060.37
• FW1060.38
• FW1060.39
• FW1060.40
• FW1060.41
• FW1060.42
• FW1060.43
• FW1060.44
• FW1060.45
• FW1060.46
• FW1060.47
• FW1060.48
• FW1060.49
• FW1060.50
• FW1060.51
• FW1110.03

License

• commercial

Website

• Vendor: https://www.ibm.com/

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Once again VulDB remains the best source for vulnerability data.

Discussion