6.7
Medium
CVE-2025-1351 IBM Storage Virtualize 8.5, 8.6, and 8.7 products could allow a user to escalate their privileges to that of another…
Description
IBM Storage Virtualize 8.5, 8.6, and 8.7 products could allow a user to escalate their privileges to that of another user logging in at the same time due to a race condition in the login function.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Storage Virtualize | 8.7 | No fix stated |
| Storage Virtualize | 8.6 | No fix stated |
| Storage Virtualize | 8.5 | No fix stated |
Other CVEs of Storage Virtualize
The 8 CVEs of Storage Virtualize →
CVE-2025-36118
IBM Storage Virtualize 8.4, 8.5, 8.7, and 9.1 IKEv1 implementation allows remote attackers to obtain sensitive…
7.5
High
CVE-2025-36120
IBM Storage Virtualize 8.4, 8.5, 8.6, and 8.7 could allow an authenticated user to escalate their privileges in an SSH…
8.8
High
CVE-2025-0160
IBM FlashSystem (IBM Storage Virtualize (8.5.0.0 through 8.5.0.13, 8.5.1.0, 8.5.2.0 through 8.5.2.3, 8.5.3.0 through…
8.1
High
CVE-2025-0159
IBM FlashSystem (IBM Storage Virtualize (8.5.0.0 through 8.5.0.13, 8.5.1.0, 8.5.2.0 through 8.5.2.3, 8.5.3.0 through…
9.1
Critical