8.4
High
CVE-2025-36193 IBM Transformation Advisor 2.0.1 through 4.3.1 incorrectly assigns privileges to security critical files which could…
Description
IBM Transformation Advisor 2.0.1 through 4.3.1 incorrectly assigns privileges to security critical files which could allow a local root escalation inside a container running the IBM Transformation Advisor Operator Catalog image.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Transformation Advisor 2.0 | 2.0.1 → 4.3.1 | No fix stated |