Insecure Default Configurations in IBM Fusion Products
CVE-2025-36222
8.7HIGH
Key Information:
- Vendor
IBM
- Vendor
- CVE Published:
- 11 September 2025
What is CVE-2025-36222?
IBM Fusion versions 2.2.0 to 2.10.1, along with IBM Fusion HCI versions 2.2.0 to 2.10.0 and IBM Fusion HCI for watsonx from version 2.8.2 to 2.10.0, are impacted by insecure default configurations. These vulnerabilities may allow unauthorized access to AMQStreams due to insufficient client authentication. Attackers could exploit these misconfigurations to execute unauthorized actions, posing a significant threat to system integrity and data security. It is essential for users to review configurations and apply security patches provided by IBM to safeguard their installations.
Affected Version(s)
Fusion 2.2.0 <= 2.10.1
Fusion HCI 2.2.0 <= 2.10.0
Fusion HCI for watsonx 2.8.2 <= 2.10.0