CVE-2025-33122 - Vulnerability Details - OpenCVE

IBM i 7.2, 7.3, 7.4, 7.5, and 7.6 could allow a user to gain elevated privileges due to an unqualified library call in IBM Advanced Job Scheduler for i. A malicious actor could cause user-controlled code to run with administrator privilege.

No CVSS v4.0

Attack Vector Network

Attack Complexity High

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact total

Vendors	Products
Ibm	I

No data.

No data.

References

Link	Providers
https://www.ibm.com/support/pages/node/7237040

History

Tue, 17 Jun 2025 18:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Tue, 17 Jun 2025 17:30:00 +0000

Type	Values Removed	Values Added
Description		IBM i 7.2, 7.3, 7.4, 7.5, and 7.6 could allow a user to gain elevated privileges due to an unqualified library call in IBM Advanced Job Scheduler for i. A malicious actor could cause user-controlled code to run with administrator privilege.
Title		IBM i privilege escalation
First Time appeared		Ibm Ibm i
Weaknesses		CWE-427
CPEs		cpe:2.3:a:ibm:i:7.2:::::::* cpe:2.3:a:ibm:i:7.3:::::::* cpe:2.3:a:ibm:i:7.4:::::::* cpe:2.3:a:ibm:i:7.5:::::::* cpe:2.3:a:ibm:i:7.6:::::::*
Vendors & Products		Ibm Ibm i
References		https://www.ibm.com/support/pages/node/7237040
Metrics		cvssV3_1 `{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'}`

MITRE

Status: PUBLISHED

Assigner: ibm

Published: 2025-06-17T17:13:00.835Z

Updated: 2025-06-17T17:25:49.342Z

Reserved: 2025-04-15T17:50:56.613Z

Link: CVE-2025-33122

Vulnrichment

Updated: 2025-06-17T17:25:28.677Z

NVD

Status : Awaiting Analysis

Published: 2025-06-17T18:15:25.580

Modified: 2025-06-17T20:50:23.507

Link: CVE-2025-33122

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2025-33122", "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "state": "PUBLISHED", "assignerShortName": "ibm", "dateReserved": "2025-04-15T17:50:56.613Z", "datePublished": "2025-06-17T17:13:00.835Z", "dateUpdated": "2025-06-17T17:25:49.342Z"}, "containers": {"cna": {"affected": [{"cpes": ["cpe:2.3:a:ibm:i:7.2:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:i:7.3:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:i:7.4:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:i:7.5:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:i:7.6:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "product": "i", "vendor": "IBM", "versions": [{"status": "affected", "version": "7.2, 7.3, 7.4, 7.5, 7.6"}]}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "IBM i 7.2, 7.3, 7.4, 7.5, and 7.6 could allow a user to gain elevated privileges due to an unqualified library call in IBM Advanced Job Scheduler for i. A malicious actor could cause user-controlled code to run with administrator privilege."}], "value": "IBM i 7.2, 7.3, 7.4, 7.5, and 7.6 could allow a user to gain elevated privileges due to an unqualified library call in IBM Advanced Job Scheduler for i. A malicious actor could cause user-controlled code to run with administrator privilege."}], "metrics": [{"cvssV3_1": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-427", "description": "CWE-427 Uncontrolled Search Path Element", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm", "dateUpdated": "2025-06-17T17:13:00.835Z"}, "references": [{"tags": ["vendor-advisory"], "url": "https://www.ibm.com/support/pages/node/7237040"}], "solutions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "The issue can be fixed by applying a PTF to IBM i. IBM i 7.6, 7.5, 7.4, 7.3, and 7.2 are addressed.<br>The IBM i PTF number for 5770-JS1 contains the fix for the vulnerability. 5770-JS1 is a skip ship product installable on the listed releases. <br> <br>IBM i Release 5770-JS1 7.2, 7.3, 7.4, 7.5, 7.6<br><br>SJ05929 <a target=\"_blank\" rel=\"nofollow\" href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ05929\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ05929</a><br>"}], "value": "The issue can be fixed by applying a PTF to IBM i. IBM i 7.6, 7.5, 7.4, 7.3, and 7.2 are addressed.\nThe IBM i PTF number for 5770-JS1 contains the fix for the vulnerability. 5770-JS1 is a skip ship product installable on the listed releases. \n \nIBM i Release 5770-JS1\u00a07.2, 7.3, 7.4, 7.5, 7.6\n\nSJ05929 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ05929"}], "source": {"discovery": "UNKNOWN"}, "title": "IBM i privilege escalation", "x_generator": {"engine": "Vuln0gram 0.2.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-06-17T17:25:22.448751Z", "id": "CVE-2025-33122", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-06-17T17:25:49.342Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-33122", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2025-06-17T17:25:22.448751Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-06-17T17:25:28.677Z"}}], "cna": {"title": "IBM i privilege escalation", "source": {"discovery": "UNKNOWN"}, "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"cpes": ["cpe:2.3:a:ibm:i:7.2:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:i:7.3:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:i:7.4:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:i:7.5:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:i:7.6:*:*:*:*:*:*:*"], "vendor": "IBM", "product": "i", "versions": [{"status": "affected", "version": "7.2, 7.3, 7.4, 7.5, 7.6"}], "defaultStatus": "unaffected"}], "solutions": [{"lang": "en", "value": "The issue can be fixed by applying a PTF to IBM i. IBM i 7.6, 7.5, 7.4, 7.3, and 7.2 are addressed.\nThe IBM i PTF number for 5770-JS1 contains the fix for the vulnerability. 5770-JS1 is a skip ship product installable on the listed releases. \n \nIBM i Release 5770-JS1\u00a07.2, 7.3, 7.4, 7.5, 7.6\n\nSJ05929 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ05929", "supportingMedia": [{"type": "text/html", "value": "The issue can be fixed by applying a PTF to IBM i. IBM i 7.6, 7.5, 7.4, 7.3, and 7.2 are addressed.<br>The IBM i PTF number for 5770-JS1 contains the fix for the vulnerability. 5770-JS1 is a skip ship product installable on the listed releases. <br> <br>IBM i Release 5770-JS1 7.2, 7.3, 7.4, 7.5, 7.6<br><br>SJ05929 <a target=\"_blank\" rel=\"nofollow\" href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ05929\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ05929</a><br>", "base64": false}]}], "references": [{"url": "https://www.ibm.com/support/pages/node/7237040", "tags": ["vendor-advisory"]}], "x_generator": {"engine": "Vuln0gram 0.2.0"}, "descriptions": [{"lang": "en", "value": "IBM i 7.2, 7.3, 7.4, 7.5, and 7.6 could allow a user to gain elevated privileges due to an unqualified library call in IBM Advanced Job Scheduler for i. A malicious actor could cause user-controlled code to run with administrator privilege.", "supportingMedia": [{"type": "text/html", "value": "IBM i 7.2, 7.3, 7.4, 7.5, and 7.6 could allow a user to gain elevated privileges due to an unqualified library call in IBM Advanced Job Scheduler for i. A malicious actor could cause user-controlled code to run with administrator privilege.", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-427", "description": "CWE-427 Uncontrolled Search Path Element"}]}], "providerMetadata": {"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm", "dateUpdated": "2025-06-17T17:13:00.835Z"}}}, "cveMetadata": {"cveId": "CVE-2025-33122", "state": "PUBLISHED", "dateUpdated": "2025-06-17T17:25:49.342Z", "dateReserved": "2025-04-15T17:50:56.613Z", "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "datePublished": "2025-06-17T17:13:00.835Z", "assignerShortName": "ibm"}, "dataVersion": "5.1"}