CVE-2025-36105 - Vulnerability Details - OpenCVE

IBM Planning Analytics Advanced Certified Containers 3.1.0 through 3.1.4 could allow a local privileged user to obtain sensitive information from environment variables.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Vendors	Products
Ibm	Planning Analytics Advanced Certified Containers

No data.

No data.

References

Link	Providers
https://www.ibm.com/support/pages/node/7262806

History

Tue, 10 Mar 2026 14:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Tue, 10 Mar 2026 01:15:00 +0000

Type	Values Removed	Values Added
Description		IBM Planning Analytics Advanced Certified Containers 3.1.0 through 3.1.4 could allow a local privileged user to obtain sensitive information from environment variables.
Title		IBM Planning Analytics Advanced Certified Containers is vulnerable to a sensitive information disclosure vulnerability
First Time appeared		Ibm Ibm planning Analytics Advanced Certified Containers
Weaknesses		CWE-526
CPEs		cpe:2.3:a:ibm:planning_analytics_advanced_certified_containers:3.1.0:::::::* cpe:2.3:a:ibm:planning_analytics_advanced_certified_containers:3.1.4:::::::*
Vendors & Products		Ibm Ibm planning Analytics Advanced Certified Containers
References		https://www.ibm.com/support/pages/node/7262806
Metrics		cvssV3_1 `{'score': 4.4, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N'}`

MITRE

Status: PUBLISHED

Assigner: ibm

Published: 2026-03-10T00:50:05.709Z

Updated: 2026-03-10T13:53:33.217Z

Reserved: 2025-04-15T21:16:16.298Z

Link: CVE-2025-36105

Vulnrichment

Updated: 2026-03-10T13:53:28.261Z

NVD

No data.

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-36105", "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "state": "PUBLISHED", "assignerShortName": "ibm", "dateReserved": "2025-04-15T21:16:16.298Z", "datePublished": "2026-03-10T00:50:05.709Z", "dateUpdated": "2026-03-10T13:53:33.217Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm", "dateUpdated": "2026-03-10T00:50:05.709Z"}, "title": "IBM Planning Analytics Advanced Certified Containers is vulnerable to a sensitive information disclosure vulnerability", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-526", "description": "CWE-526 Cleartext Storage of Sensitive Information in an Environment Variable", "type": "CWE"}]}], "affected": [{"vendor": "IBM", "product": "Planning Analytics Advanced Certified Containers", "versions": [{"status": "affected", "version": "3.1.0", "lessThanOrEqual": "3.1.4", "versionType": "semver"}], "cpes": ["cpe:2.3:a:ibm:planning_analytics_advanced_certified_containers:3.1.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:planning_analytics_advanced_certified_containers:3.1.4:*:*:*:*:*:*:*"]}], "descriptions": [{"lang": "en", "value": "IBM Planning Analytics Advanced Certified Containers 3.1.0 through 3.1.4 could allow a local privileged user to obtain sensitive information from environment variables.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>IBM Planning Analytics Advanced Certified Containers 3.1.0 through 3.1.4 could allow a local privileged user to obtain sensitive information from environment variables.</p>"}]}], "references": [{"url": "https://www.ibm.com/support/pages/node/7262806", "tags": ["vendor-advisory", "patch"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "HIGH", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "availabilityImpact": "NONE", "baseSeverity": "MEDIUM", "baseScore": 4.4, "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N"}}], "solutions": [{"lang": "en", "value": "Affected Product(s)VersionFixIBM Planning Analytics Advanced Certified Containers3.1.0 - 3.1.4 IBM Planning Analytics Advanced Certified Containers 3.1.5 is now available https://www.ibm.com/support/pages/node/7261546", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<br><table><tbody><tr><td>Affected Product(s)</td><td>Version</td><td>Fix</td></tr><tr><td>IBM Planning Analytics Advanced Certified Containers</td><td>3.1.0 - 3.1.4</td><td><a href=\"https://www.ibm.com/support/pages/node/7261546\" rel=\"nofollow\">IBM Planning Analytics Advanced Certified Containers 3.1.5 is now available</a></td></tr></tbody></table><p> </p>"}]}], "x_generator": {"engine": "ibm-cvegen"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-03-10T13:53:23.928884Z", "id": "CVE-2025-36105", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-10T13:53:33.217Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-36105", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-03-10T13:53:23.928884Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-10T13:53:28.261Z"}}], "cna": {"title": "IBM Planning Analytics Advanced Certified Containers is vulnerable to a sensitive information disclosure vulnerability", "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.4, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"cpes": ["cpe:2.3:a:ibm:planning_analytics_advanced_certified_containers:3.1.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:planning_analytics_advanced_certified_containers:3.1.4:*:*:*:*:*:*:*"], "vendor": "IBM", "product": "Planning Analytics Advanced Certified Containers", "versions": [{"status": "affected", "version": "3.1.0", "versionType": "semver", "lessThanOrEqual": "3.1.4"}]}], "solutions": [{"lang": "en", "value": "Affected Product(s)VersionFixIBM Planning Analytics Advanced Certified Containers3.1.0 - 3.1.4 IBM Planning Analytics Advanced Certified Containers 3.1.5 is now available https://www.ibm.com/support/pages/node/7261546", "supportingMedia": [{"type": "text/html", "value": "<br><table><tbody><tr><td>Affected Product(s)</td><td>Version</td><td>Fix</td></tr><tr><td>IBM Planning Analytics Advanced Certified Containers</td><td>3.1.0 - 3.1.4</td><td><a href=\"https://www.ibm.com/support/pages/node/7261546\" rel=\"nofollow\">IBM Planning Analytics Advanced Certified Containers 3.1.5 is now available</a></td></tr></tbody></table><p> </p>", "base64": false}]}], "references": [{"url": "https://www.ibm.com/support/pages/node/7262806", "tags": ["vendor-advisory", "patch"]}], "x_generator": {"engine": "ibm-cvegen"}, "descriptions": [{"lang": "en", "value": "IBM Planning Analytics Advanced Certified Containers 3.1.0 through 3.1.4 could allow a local privileged user to obtain sensitive information from environment variables.", "supportingMedia": [{"type": "text/html", "value": "<p>IBM Planning Analytics Advanced Certified Containers 3.1.0 through 3.1.4 could allow a local privileged user to obtain sensitive information from environment variables.</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-526", "description": "CWE-526 Cleartext Storage of Sensitive Information in an Environment Variable"}]}], "providerMetadata": {"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm", "dateUpdated": "2026-03-10T00:50:05.709Z"}}}, "cveMetadata": {"cveId": "CVE-2025-36105", "state": "PUBLISHED", "dateUpdated": "2026-03-10T13:53:33.217Z", "dateReserved": "2025-04-15T21:16:16.298Z", "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "datePublished": "2026-03-10T00:50:05.709Z", "assignerShortName": "ibm"}, "dataVersion": "5.2"}