Security Bulletin: IBM Sterling B2B Integrator and IBM Sterling File Gateway are vulnerable due to improper permission check vulnerability in Zookeeper (CVE-2025-58457)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway are vulnerable due to improper permission check vulnerability in Zookeeper Vulnerability Details CVEID:CVE-2025-58457 DESCRIPTION: Improper permission check in ZooKeeper AdminServer lets authorized clients to run snapshot and resto...

Security Bulletin: IBM Sterling B2B Integrator and IBM Sterling File Gateway are vulnerable due to improper permission check vulnerability in Zookeeper (CVE-2025-58457)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway are vulnerable due to improper permission check vulnerability in Zookeeper Vulnerability Details CVEID:CVE-2025-58457 DESCRIPTION: Improper permission check in ZooKeeper AdminServer lets authorized clients to run snapshot and resto...

Security Bulletin: Vulnerability in Apache ZooKeeper affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.

Summary Potential vulnerability in Apache ZooKeeper has been identified that affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component. . The vulnerability have been addressed. Refer to details for additional information...

Apache ZooKeeper 3.9.x < 3.9.4 Improper Permission Check

The version of Apache ZooKeeper listening on the remote host is 3.9.x prior to 3.9.4. It is, therefore, affected by an improper permission check vulnerability: - Improper permission check in ZooKeeper AdminServer lets authorized clients to run snapshot and restore commands with insufficient...

CVE-2025-58457 vulnerabilities

Vulnerabilities for packages: apache-activemq-artemis, thingsboard, trino, solr, strimzi-kafka-operator, spark...

CVE-2025-58457 vulnerabilities

Vulnerabilities for packages: thingsboard, apache-activemq-artemis, strimzi-kafka-operator, trino, solr, spark-fips, spark, prometheus-jmx-exporter...

CVE-2025-58457

creationtimestamp| type| source ---|---|--- 2025-09-24 13:24:31+00:00| seen| https://seclists.org/oss-sec/2025/q3/193 2026-06-18 19:11:29+00:00| seen| https://gist.github.com/ppkarwasz/f5be1b5c0182fe665252101c5f24d39f...

CVE-2025-58457

Apache ZooKeeper (versions 3.9.0 before 3.9.4) contains an improper permission check in the AdminServer, allowing authorized clients to execute snapshot and restore commands with insufficient privileges (CWE-280). This vulnerability impacts several products, including IBM Sterling B2B Integrator ...

CVE-2025-58457

Improper permission check in ZooKeeper AdminServer lets authorized clients to run snapshot and restore command with insufficient permissions. This issue affects Apache ZooKeeper: from 3.9.0 before 3.9.4. Users are recommended to upgrade to version 3.9.4, which fixes the issue. The issue can be...