CVE-2025-36373

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-36373", "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "state": "PUBLISHED", "assignerShortName": "ibm", "dateReserved": "2025-04-15T21:16:56.325Z", "datePublished": "2026-04-01T20:47:46.485Z", "dateUpdated": "2026-04-02T15:49:19.578Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm", "dateUpdated": "2026-04-01T20:49:32.409Z"}, "title": "Incorrect administrative access control in IBM DataPower Gateway", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-497", "description": "CWE-497 Exposure of Sensitive System Information to an Unauthorized Control Sphere", "type": "CWE"}]}], "affected": [{"vendor": "IBM", "product": "DataPower Gateway 10.6CD", "versions": [{"status": "affected", "version": "10.6.1.0", "lessThanOrEqual": "10.6.5.0", "versionType": "semver"}], "cpes": ["cpe:2.3:a:ibm:datapower_gateway_106cd:10.6.1.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:datapower_gateway_106cd:10.6.5.0:*:*:*:*:*:*:*"]}, {"vendor": "IBM", "product": "DataPower Gateway 10.5.0", "versions": [{"status": "affected", "version": "10.5.0.0", "lessThanOrEqual": "10.5.0.20", "versionType": "semver"}], "cpes": ["cpe:2.3:a:ibm:datapower_gateway_1050:10.5.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:datapower_gateway_1050:10.5.0.20:*:*:*:*:*:*:*"]}, {"vendor": "IBM", "product": "DataPower Gateway 10.6.0", "versions": [{"status": "affected", "version": "10.6.0.0", "lessThanOrEqual": "10.6.0.8", "versionType": "semver"}], "cpes": ["cpe:2.3:a:ibm:datapower_gateway_1060:10.6.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:datapower_gateway_1060:10.6.0.8:*:*:*:*:*:*:*"]}], "descriptions": [{"lang": "en", "value": "IBM DataPower Gateway 10.6CD 10.6.1.0 through 10.6.5.0 and IBM DataPower Gateway 10.5.0 10.5.0.0 through 10.5.0.20 and IBM DataPower Gateway 10.6.0 10.6.0.0 through 10.6.0.8 IBM DataPower Gateway could disclose sensitive system information from other domains to an administrative user.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>IBM DataPower Gateway 10.6CD 10.6.1.0 through 10.6.5.0 and IBM DataPower Gateway 10.5.0 10.5.0.0 through 10.5.0.20 and IBM DataPower Gateway 10.6.0 10.6.0.0 through 10.6.0.8 IBM DataPower Gateway could disclose sensitive system information from other domains to an administrative user.</p>"}]}], "references": [{"url": "https://www.ibm.com/support/pages/node/7267833", "tags": ["vendor-advisory", "patch"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "HIGH", "userInteraction": "NONE", "scope": "CHANGED", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "availabilityImpact": "NONE", "baseSeverity": "MEDIUM", "baseScore": 4.1, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N"}}], "solutions": [{"lang": "en", "value": "Affected Product(s)Fixed in versionFix listIBM DataPower Gateway 10.6CD 10.6.1.0 - 10.6.5.010.6.6.0 Installation and Upgrade 10.6.x https://www.ibm.com/docs/en/datapower-gateway/10.6.x IBM DataPower Gateway 10.5.0.0 - 10.5.0.2010.5.0.21 Installation and Upgrade 10.5.0 https://www.ibm.com/docs/en/datapower-gateway/10.5.0 IBM DataPower Gateway 10.6.0.0 - 10.6.0.810.6.0.9 Installation and Upgrade 10.6.0 https://www.ibm.com/docs/en/datapower-gateway/10.6.0", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<div><table><tbody><tr><td>Affected Product(s)</td><td>Fixed in version</td><td>Fix list</td></tr><tr><td>IBM DataPower Gateway 10.6CD 10.6.1.0 - 10.6.5.0</td><td>10.6.6.0</td><td><a href=\"https://www.ibm.com/docs/en/datapower-gateway/10.6.x?topic=overview-release-notes#relnotes__install__title__1\" rel=\"nofollow\">Installation and Upgrade 10.6.x</a></td></tr><tr><td>IBM DataPower Gateway 10.5.0.0 - 10.5.0.20</td><td>10.5.0.21</td><td><a href=\"https://www.ibm.com/docs/en/datapower-gateway/10.5.0?topic=overview-release-notes#relnotes__install__title__1\" rel=\"nofollow\">Installation and Upgrade 10.5.0</a></td></tr><tr><td>IBM DataPower Gateway 10.6.0.0 - 10.6.0.8</td><td>10.6.0.9</td><td><a href=\"https://www.ibm.com/docs/en/datapower-gateway/10.6.0?topic=overview-release-notes#relnotes__install__title__1\" rel=\"nofollow\">Installation and Upgrade 10.6.0</a></td></tr></tbody></table></div><p><br></p>"}]}], "x_generator": {"engine": "ibm-cvegen"}, "credits": [{"lang": "en", "value": "Acknowledgement This vulnerability was reported to IBM by Micha\u0142 Bartoszuk & Maciej W\u0142odarczyk @ STM Cyber.", "type": "finder"}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-04-02T15:48:55.294586Z", "id": "CVE-2025-36373", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-02T15:49:19.578Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-36373", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-04-02T15:48:55.294586Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-02T15:49:05.681Z"}}], "cna": {"title": "Incorrect administrative access control in IBM DataPower Gateway", "credits": [{"lang": "en", "type": "finder", "value": "Acknowledgement This vulnerability was reported to IBM by Micha\u0142 Bartoszuk & Maciej W\u0142odarczyk @ STM Cyber."}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 4.1, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "HIGH", "confidentialityImpact": "LOW"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"cpes": ["cpe:2.3:a:ibm:datapower_gateway_106cd:10.6.1.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:datapower_gateway_106cd:10.6.5.0:*:*:*:*:*:*:*"], "vendor": "IBM", "product": "DataPower Gateway 10.6CD", "versions": [{"status": "affected", "version": "10.6.1.0", "versionType": "semver", "lessThanOrEqual": "10.6.5.0"}]}, {"cpes": ["cpe:2.3:a:ibm:datapower_gateway_1050:10.5.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:datapower_gateway_1050:10.5.0.20:*:*:*:*:*:*:*"], "vendor": "IBM", "product": "DataPower Gateway 10.5.0", "versions": [{"status": "affected", "version": "10.5.0.0", "versionType": "semver", "lessThanOrEqual": "10.5.0.20"}]}, {"cpes": ["cpe:2.3:a:ibm:datapower_gateway_1060:10.6.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:datapower_gateway_1060:10.6.0.8:*:*:*:*:*:*:*"], "vendor": "IBM", "product": "DataPower Gateway 10.6.0", "versions": [{"status": "affected", "version": "10.6.0.0", "versionType": "semver", "lessThanOrEqual": "10.6.0.8"}]}], "solutions": [{"lang": "en", "value": "Affected Product(s)Fixed in versionFix listIBM DataPower Gateway 10.6CD 10.6.1.0 - 10.6.5.010.6.6.0 Installation and Upgrade 10.6.x https://www.ibm.com/docs/en/datapower-gateway/10.6.x IBM DataPower Gateway 10.5.0.0 - 10.5.0.2010.5.0.21 Installation and Upgrade 10.5.0 https://www.ibm.com/docs/en/datapower-gateway/10.5.0 IBM DataPower Gateway 10.6.0.0 - 10.6.0.810.6.0.9 Installation and Upgrade 10.6.0 https://www.ibm.com/docs/en/datapower-gateway/10.6.0", "supportingMedia": [{"type": "text/html", "value": "<div><table><tbody><tr><td>Affected Product(s)</td><td>Fixed in version</td><td>Fix list</td></tr><tr><td>IBM DataPower Gateway 10.6CD 10.6.1.0 - 10.6.5.0</td><td>10.6.6.0</td><td><a href=\"https://www.ibm.com/docs/en/datapower-gateway/10.6.x?topic=overview-release-notes#relnotes__install__title__1\" rel=\"nofollow\">Installation and Upgrade 10.6.x</a></td></tr><tr><td>IBM DataPower Gateway 10.5.0.0 - 10.5.0.20</td><td>10.5.0.21</td><td><a href=\"https://www.ibm.com/docs/en/datapower-gateway/10.5.0?topic=overview-release-notes#relnotes__install__title__1\" rel=\"nofollow\">Installation and Upgrade 10.5.0</a></td></tr><tr><td>IBM DataPower Gateway 10.6.0.0 - 10.6.0.8</td><td>10.6.0.9</td><td><a href=\"https://www.ibm.com/docs/en/datapower-gateway/10.6.0?topic=overview-release-notes#relnotes__install__title__1\" rel=\"nofollow\">Installation and Upgrade 10.6.0</a></td></tr></tbody></table></div><p><br></p>", "base64": false}]}], "references": [{"url": "https://www.ibm.com/support/pages/node/7267833", "tags": ["vendor-advisory", "patch"]}], "x_generator": {"engine": "ibm-cvegen"}, "descriptions": [{"lang": "en", "value": "IBM DataPower Gateway 10.6CD 10.6.1.0 through 10.6.5.0 and IBM DataPower Gateway 10.5.0 10.5.0.0 through 10.5.0.20 and IBM DataPower Gateway 10.6.0 10.6.0.0 through 10.6.0.8 IBM DataPower Gateway could disclose sensitive system information from other domains to an administrative user.", "supportingMedia": [{"type": "text/html", "value": "<p>IBM DataPower Gateway 10.6CD 10.6.1.0 through 10.6.5.0 and IBM DataPower Gateway 10.5.0 10.5.0.0 through 10.5.0.20 and IBM DataPower Gateway 10.6.0 10.6.0.0 through 10.6.0.8 IBM DataPower Gateway could disclose sensitive system information from other domains to an administrative user.</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-497", "description": "CWE-497 Exposure of Sensitive System Information to an Unauthorized Control Sphere"}]}], "providerMetadata": {"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm", "dateUpdated": "2026-04-01T20:49:32.409Z"}}}, "cveMetadata": {"cveId": "CVE-2025-36373", "state": "PUBLISHED", "dateUpdated": "2026-04-02T15:49:19.578Z", "dateReserved": "2025-04-15T21:16:56.325Z", "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "datePublished": "2026-04-01T20:47:46.485Z", "assignerShortName": "ibm"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"cpes": ["cpe:2.3:a:ibm:datapower_gateway_106cd:10.6.1.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:datapower_gateway_106cd:10.6.5.0:*:*:*:*:*:*:*"], "product": "DataPower Gateway 10.6CD", "vendor": "IBM", "versions": [{"lessThanOrEqual": "10.6.5.0", "status": "affected", "version": "10.6.1.0", "versionType": "semver"}]}, {"cpes": ["cpe:2.3:a:ibm:datapower_gateway_1050:10.5.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:datapower_gateway_1050:10.5.0.20:*:*:*:*:*:*:*"], "product": "DataPower Gateway 10.5.0", "vendor": "IBM", "versions": [{"lessThanOrEqual": "10.5.0.20", "status": "affected", "version": "10.5.0.0", "versionType": "semver"}]}, {"cpes": ["cpe:2.3:a:ibm:datapower_gateway_1060:10.6.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:datapower_gateway_1060:10.6.0.8:*:*:*:*:*:*:*"], "product": "DataPower Gateway 10.6.0", "vendor": "IBM", "versions": [{"lessThanOrEqual": "10.6.0.8", "status": "affected", "version": "10.6.0.0", "versionType": "semver"}]}], "source": "psirt@us.ibm.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:ibm:datapower_gateway:*:*:*:*:*:*:*:*", "matchCriteriaId": "CE32BDC7-B268-4779-A283-F94DCF1433D3", "versionEndExcluding": "10.5.0.21", "versionStartIncluding": "10.5.0.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:datapower_gateway:*:*:*:*:*:*:*:*", "matchCriteriaId": "9036053D-6E1A-4B2F-ACCA-5E3F4443F73E", "versionEndExcluding": "10.6.0.9", "versionStartIncluding": "10.6.0.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:datapower_gateway:*:*:*:*:continuous_delivery:*:*:*", "matchCriteriaId": "E75118C5-5C01-404E-B857-56B9D6CA2119", "versionEndExcluding": "10.6.6.0", "versionStartIncluding": "10.6.1.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "IBM DataPower Gateway 10.6CD 10.6.1.0 through 10.6.5.0 and IBM DataPower Gateway 10.5.0 10.5.0.0 through 10.5.0.20 and IBM DataPower Gateway 10.6.0 10.6.0.0 through 10.6.0.8 IBM DataPower Gateway could disclose sensitive system information from other domains to an administrative user."}, {"lang": "es", "value": "IBM DataPower Gateway 10.6CD 10.6.1.0 hasta 10.6.5.0 y IBM DataPower Gateway 10.5.0 10.5.0.0 hasta 10.5.0.20 y IBM DataPower Gateway 10.6.0 10.6.0.0 hasta 10.6.0.8 IBM DataPower Gateway podr\u00eda divulgar informaci\u00f3n sensible del sistema de otros dominios a un usuario administrativo."}], "id": "CVE-2025-36373", "lastModified": "2026-10-14T17:10:00.210", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.1, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 2.3, "impactScore": 1.4, "source": "psirt@us.ibm.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.8, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 2.3, "impactScore": 4.0, "source": "nvd@nist.gov", "type": "Primary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-36373", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-04-02T15:48:55.294586Z", "version": "2.0.3"}}]}, "published": "2026-04-01T21:16:57.897", "references": [{"source": "psirt@us.ibm.com", "tags": ["Vendor Advisory"], "url": "https://www.ibm.com/support/pages/node/7267833"}], "sourceIdentifier": "psirt@us.ibm.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-497"}], "source": "psirt@us.ibm.com", "type": "Secondary"}, {"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[10.5.0.0,10.5.0.20]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "DataPower Gateway 10.5.0", "source": "cna", "vendor": "IBM"}, "product": "datapower_gateway_1050", "vendor": "ibm"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[10.6.0.0,10.6.0.8]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "DataPower Gateway 10.6.0", "source": "cna", "vendor": "IBM"}, "product": "datapower_gateway_1060", "vendor": "ibm"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[10.6.1.0,10.6.5.0]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "DataPower Gateway 10.6CD", "source": "cna", "vendor": "IBM"}, "product": "datapower_gateway_106cd", "vendor": "ibm"}], "analysis": {"en": {"generated_at": "2026-04-06T21:52:07.389637+00:00", "value": {"mitigation_remediation": ["Upgrade the affected DataPower Gateway to the latest patched versions (10.5.0.21, 10.6.0.9, 10.6.1.0, 10.6.5.0 or 10.6.6.0) using instructions from IBM\u2019s official documentation URLs provided above.", "Verify that the administrative interface is protected by strong authentication mechanisms and that only trusted administrators have access.", "If an upgrade is delayed, isolate administrative access to a secure network segment, enforce strict role\u2011based access controls and monitor for anomalous cross\u2011domain data retrieval activities."], "summary": {"action": "Patch promptly", "impact": "Sensitive data disclosure to improperly privileged administrators"}, "threat_synthesis": {"affected_systems": "Affected products include IBM DataPower Gateway 10.5.0 (10.5.0.0 through 10.5.0.20), 10.6.0 (10.6.0.0 through 10.6.0.8) and 10.6CD (10.6CD 10.6.1.0 through 10.6.5.0). The issue is resolved in the following releases: 10.5.0.21, 10.6.0.9, 10.6.1.0, 10.6.5.0 and 10.6.6.0. Detailed upgrade instructions and fix lists are available at https://www.ibm.com/docs/en/datapower-gateway/10.5.0, https://www.ibm.com/docs/en/datapower-gateway/10.6.0 and https://www.ibm.com/docs/en/datapower-gateway/10.6.x.", "description_and_impact": "IBM DataPower Gateway versions 10.5.0, 10.6.0 and 10.6CD contain an access\u2011control flaw (CWE\u2011497) that permits an administrative user to retrieve configuration data and other sensitive system information from domains that the user should not be able to view. This weakness can expose credentials, system settings and other confidential details, thereby compromising the confidentiality of all managed domains.", "risk_and_exploitability": "The CVSS base score of 4.1 indicates moderate severity, while an EPSS score of less than 1\u202f% suggests a low likelihood of exploitation in the wild. The vulnerability is not listed in the CISA KEV catalog. Exploitation requires administrative authentication or control; attackers would need to log in as an administrator or compromise an existing admin account to leverage the flaw, thereby limiting threat exposure primarily to insiders or accounts later hijacked by external actors."}}}}, "created": "2026-04-02T07:47:30.135720+00:00", "updated": "2026-04-07T08:07:25.536305+00:00", "vendors": ["ibm", "ibm$PRODUCT$datapower_gateway_1050", "ibm$PRODUCT$datapower_gateway_1060", "ibm$PRODUCT$datapower_gateway_106cd"]}