CVE-2025-3218

Name of the Vulnerable Software and Affected Versions IBM i versions 7.2 through 7.6

Description The issue concerns authentication and authorization attacks due to incorrect validation processing in IBM i Netserver. A malicious actor could exploit these weaknesses, in conjunction with brute force authentication attacks or to bypass authority restrictions, to access the server.

Recommendations For IBM i versions 7.2 through 7.6, consider restricting access to the Netserver until a patch is available. As a temporary workaround, limit the use of brute force authentication attacks and authority restrictions to minimize the risk of exploitation.