CVE-2025-36252 in Storage TS4500 Library

Resumen

por MITRE • 2026-10-20

IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 IBM TS4500 Tape Library/Diamondback Tape Library does not invalidate session which could allow an authenticated user to impersonate another user on the system.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Responsable: Ibm
• Reservar: 2025-04-15
• Divulgación: 2026-10-20
• Moderación: aceptado
• Artículo: VDB-422572
• CPE: 20261020
• CWE: CWE-613 (confirmado)
• CVSS: 6.3 (CNA)
• EPSS: 0.00000
• KEV: no
• Actividades: bajo
• Sector: Transportation, Telecommunication, ...

Fuentes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-36252
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-36252
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-36252/