CVE-2025-36069

IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 does not invalidate session after a logout which could allow an authenticated user to impersonate another user on the system.

Score

CVSS 3.1 5.5 Medium

Status

Awaiting Analysis - psirt@us.ibm.com

Published

2026-10-19

Last modified

2026-10-28

Weaknesses

CWE-613

Affected products

• Storage Ts4500 Library (Ibm)

References

• https://www.ibm.com/support/pages/node/7292613