CNNVD-202601-3262 Information

CNNVD ID

CNNVD-202601-3262

CVE-2025-12985

  • CNNVD Published: 2026-01-20

Description (Chinese)

IBM Licensing Operator是美国国际商业机器(IBM)公司的一个自动收集管理数据的组件。 IBM Licensing Operator存在安全漏洞,该漏洞源于权限分配不当,可能导致在运行IBM Licensing Operator镜像的容器内本地权限提升。

Description (English)

IBM Licensing Operator is an automatic data collection and management component of IBM. There is a security loophole in IBM Licensing Operator, which stems from the misallocation of privileges, which may lead to the upgrading of local privileges in containers that operate IBM Licensing Operator mirrors.

Hazard Level

Medium

Vulnerability Type

其他

Affected Vendor

国际商业机器

Published

2026-01-20

Last Modified

2026-02-24

References

https://www.ibm.com/support/pages/license-service-privilege-escalation-vulnerability

Patch

https://www.ibm.com/software/passportadvantage/ibmlicensemetrictool

Share on: