[ CVE-2025-36069 · Published 19 Oct 2026 ]
Vulnerability in IBM Storage TS4500 Library
CVSS 5.5
EPSS <1%No fix listed yet
[ Description ]Official description
IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 does not invalidate session after a logout which could allow an authenticated user to impersonate another user on the system.
[ Fixes ]Fixes and patches
No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.