5.5
Medium
CVE-2025-36069 IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 does not invalidate session after a logout which could allow an…
Description
IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 does not invalidate session after a logout which could allow an authenticated user to impersonate another user on the system.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Storage TS4500 Library 1.1 | 1.1.1.6 → 1.12.0.3 | No fix stated |
Other CVEs of Storage TS4500 Library
The 7 CVEs of Storage TS4500 Library →
CVE-2025-36061
IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 IBM Diamondback Tape Library and IBM Storage TS4500 Library could…
6.5
Medium
CVE-2025-36252
IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 IBM TS4500 Tape Library/Diamondback Tape Library does not invalidate…
6.3
Medium
CVE-2026-19178
IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 could allow a remote authenticated attacker to gain unauthorized…
6.8
Medium
CVE-2025-36239
IBM Storage TS4500 Library 1.11.0.0 and 2.11.0.0
is vulnerable to cross-site scripting
6.1
Medium