IBM Edge Application Manager 4.5 could allow a local user to read or modify resources that they should not have authorization to access due to incorrect permission assignment. This vulnerability poses a risk to the integrity of the system, as unauthorized users may gain access to sensitive information or alter critical resources.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.1 | CVE-2025-1139 |
Exploitation
To exploit this vulnerability, a local user with low privileges can leverage incorrect permission assignments to access or modify resources that should be restricted. This could involve using local scripts or tools to probe the system for accessible resources and then executing unauthorized actions.
Affected Products
- IBM Edge Application Manager 4.5: This product is affected due to its improper permission settings, allowing local users to access restricted resources.
Mitigation
To mitigate this vulnerability, it is recommended to review and correct permission assignments within IBM Edge Application Manager 4.5. Ensuring that users have the appropriate level of access and implementing strict access controls can help prevent unauthorized access and modifications.