CVE-2025-1139 MEDIUM

CVE-2025-1139: IBM Edge Application Manager incorrect permissions

Vendor Ibm

Product Edge Application Manager

Weakness CWE-732

Published August 20, 2025

Last update August 20, 2025

View on NVD All CVEs

CVSS base score

6.1/10

Attack vector Local

Attack complexity Low

Privileges required Low

User interaction None

Confidentiality Low

Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N

What the vulnerability does

01Description

IBM Edge Application Manager 4.5 could allow a local user to read or modify resources that they should not have authorization to access due to incorrect permission assignment.

Key dates

02Disclosure timeline

August 20, 2025 CVE published

August 20, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-1139 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/732.html

Related vulnerabilities

04Related CVE

CVE-2024-9244 Foxit PDF Reader Update Service Incorrect Permission Assignment Local Privilege Escalation Vulnerability CVE-2026-32048 OpenClaw < 2026.3.1 - Sandbox Escape via Cross-Agent sessions_spawn CVE-2025-43759 CVE-2022-22248 Junos OS Evolved: Incorrect file permissions can allow low-privileged user to cause another user to execute arbitrary commands CVE-2026-26929 Apache Airflow: Wildcard DagVersion Listing Bypasses Per‑DAG RBAC and Leaks Metadata