PT-2025-39829
CVE-2025-36351
·
Published
2025-09-29
·
Updated
2026-10-09
Description by
CVSS 3.1
4.3
MediumMetricsAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions
IBM License Metric Tool versions 9.2.0 through 9.2.40
Description
An authenticated user can bypass access controls within the REST API interface, potentially leading to unauthorized actions. The issue relates to access control within the REST API. The API endpoint allows bypassing of intended security measures.
Recommendations
Update to a version later than 9.2.40.
Found an issue in the description? Have something to add? Feel free to write us 👾