PT-2025-2690

🗓️ 28 Jan 2025 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 9 Views

glog allows attackers to hijack log files. Use a secure directory for logging to prevent exploits.

Reporter	Title	Published	Views	Family All 927
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container UBI updates	26 Mar 202518:00	–	ibm
IBM Security Bulletins	Security Bulletin: There are multiple vulnerabilities that can affect IBM Fusion HCI and IBM Fusion HCI for watsonx	31 May 202514:07	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Storage Protect Server is susceptible to a vulnerability due to Golang glog library	5 Dec 202513:42	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Storage Fusion Data Foundation is vulnerable to CVE-2025-27144 in different components	25 Jun 202516:28	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Storage Ceph is vulnerable to Improper Handling of Syntactically Invalid Structure in Grafana (CVE-2025-22865)	18 Dec 202516:07	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Observability with Instana (OnPrem) is affected by multiple security vulnerabilities	27 Feb 202509:34	–	ibm
IBM Security Bulletins	Security Bulletin: There are multiple vulnerabilities that can affect IBM Fusion	31 May 202514:06	–	ibm
IBM Security Bulletins	Security Bulletin: There are multiple vulnerabilities that can affect IBM Fusion	19 Dec 202520:44	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Rapid Infrastructure Automation	27 Apr 202610:31	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Financial Transaction Manager is impacted by multiple vulnerabilities in RedHat Proxy for Kubernetes RBAC authorization	7 Aug 202519:32	–	ibm

Source	Link
suse	www.suse.com/security/cve/CVE-2025-20621
suse	www.suse.com/security/cve/CVE-2025-22872
owasp	www.owasp.org/www-community/vulnerabilities/Insecure_Temporary_File
suse	www.suse.com/security/cve/CVE-2026-42506
suse	www.suse.com/security/cve/CVE-2026-42508
lists	www.lists.debian.org/debian-lts-announce/2025/02/msg00019.html
osv	www.osv.dev/vulnerability/SUSE-SU-2025:0580-1
access	www.access.redhat.com/security/cve/cve-2024-45339
suse	www.suse.com/security/cve/CVE-2025-22866
suse	www.suse.com/security/cve/CVE-2024-11741

25 Jun 2026 00:00Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.17.1 - 7.5

CVSS 48.7

EPSS0.00587

SSVC