NetSight
medium4.3

CVE-2025-36351

IBM License Metric Tool 9.2.0 through 9.2.40 could allow an authenticated user to bypass access controls in the REST API interface and perform unauthorized act…

Impact

IBM License Metric Tool 9.2.0 through 9.2.40 could allow an authenticated user to bypass access controls in the REST API interface and perform unauthorized actions.

Affected products

VendorProductAffected versions
IbmLicense Metric Tool
from 9.2.0 before 9.2.41

Weakness classification

References