CVE-2025-36105 - Vulnerability Details - OpenCVE

IBM Planning Analytics Advanced Certified Containers 3.1.0 through 3.1.4 could allow a local privileged user to obtain sensitive information from environment variables.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Ibm	Planning Analytics Advanced Certified Containers

No data.

No data.

References

Link	Providers
https://www.spirityenterprise.com/virtual-ciso
https://www.ibm.com/support/pages/node/7262806

History

Tue, 10 Mar 2026 01:15:00 +0000

Type	Values Removed	Values Added
Description		IBM Planning Analytics Advanced Certified Containers 3.1.0 through 3.1.4 could allow a local privileged user to obtain sensitive information from environment variables.
Title		IBM Planning Analytics Advanced Certified Containers is vulnerable to a sensitive information disclosure vulnerability
First Time appeared		Ibm Ibm planning Analytics Advanced Certified Containers
Weaknesses		CWE-526
CPEs		cpe:2.3:a:ibm:planning_analytics_advanced_certified_containers:3.1.0:::::::* cpe:2.3:a:ibm:planning_analytics_advanced_certified_containers:3.1.4:::::::*
Vendors & Products		Ibm Ibm planning Analytics Advanced Certified Containers
References		https://www.ibm.com/support/pages/node/7262806
Metrics		cvssV3_1 `{'score': 4.4, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N'}`

MITRE

Status: PUBLISHED

Assigner: ibm

Published: 2026-03-10T00:50:05.709Z

Updated: 2026-03-10T00:50:05.709Z

Reserved: 2025-04-15T21:16:16.298Z

Link: CVE-2025-36105

Vulnrichment

No data.

NVD

No data.

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-36105", "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "state": "PUBLISHED", "assignerShortName": "ibm", "dateReserved": "2025-04-15T21:16:16.298Z", "datePublished": "2026-03-10T00:50:05.709Z", "dateUpdated": "2026-03-10T00:50:05.709Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm", "dateUpdated": "2026-03-10T00:50:05.709Z"}, "title": "IBM Planning Analytics Advanced Certified Containers is vulnerable to a sensitive information disclosure vulnerability", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-526", "description": "CWE-526 Cleartext Storage of Sensitive Information in an Environment Variable", "type": "CWE"}]}], "affected": [{"vendor": "IBM", "product": "Planning Analytics Advanced Certified Containers", "versions": [{"status": "affected", "version": "3.1.0", "lessThanOrEqual": "3.1.4", "versionType": "semver"}], "cpes": ["cpe:2.3:a:ibm:planning_analytics_advanced_certified_containers:3.1.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:planning_analytics_advanced_certified_containers:3.1.4:*:*:*:*:*:*:*"]}], "descriptions": [{"lang": "en", "value": "IBM Planning Analytics Advanced Certified Containers 3.1.0 through 3.1.4 could allow a local privileged user to obtain sensitive information from environment variables.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>IBM Planning Analytics Advanced Certified Containers 3.1.0 through 3.1.4 could allow a local privileged user to obtain sensitive information from environment variables.</p>"}]}], "references": [{"url": "https://www.ibm.com/support/pages/node/7262806", "tags": ["vendor-advisory", "patch"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "HIGH", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "availabilityImpact": "NONE", "baseSeverity": "MEDIUM", "baseScore": 4.4, "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N"}}], "solutions": [{"lang": "en", "value": "Affected Product(s)VersionFixIBM Planning Analytics Advanced Certified Containers3.1.0 - 3.1.4 IBM Planning Analytics Advanced Certified Containers 3.1.5 is now available https://www.ibm.com/support/pages/node/7261546", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<br><table><tbody><tr><td>Affected Product(s)</td><td>Version</td><td>Fix</td></tr><tr><td>IBM Planning Analytics Advanced Certified Containers</td><td>3.1.0 - 3.1.4</td><td><a href=\"https://www.ibm.com/support/pages/node/7261546\" rel=\"nofollow\">IBM Planning Analytics Advanced Certified Containers 3.1.5 is now available</a></td></tr></tbody></table><p> </p>"}]}], "x_generator": {"engine": "ibm-cvegen"}}}}