Skip to content
OpenAdvisories
Medium · 5.4 CVE-2025-3218 EUVD-2025-13662GHSA-853f-c79c-j2h2

IBM i improper certificate validation

Published May 7, 2025 · Updated Sep 1, 2025 · Assigned by ibm

Description

IBM i 7.2, 7.3, 7.4, 7.5, and 7.6 is vulnerable to authentication and authorization attacks due to incorrect validation processing in IBM i Netserver. A malicious actor could use the weaknesses, in conjunction with brute force authentication attacks or to bypass authority restrictions, to access the server.

Affected products

VendorProductAffectedFixed
IBM i 7.2, 7.3, 7.4, 7.5, 7.6 —

References