CVE-2025-36252

IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 IBM TS4500 Tape Library/Diamondback Tape Library does not invalidate session which could allow an authenticated user to impersonate another user on the system.

Score

CVSS 3.1 6.3 Medium

Status

Awaiting Analysis - psirt@us.ibm.com

Published

2026-10-19

Last modified

2026-10-28

Weaknesses

CWE-613

Affected products

• Storage Ts4500 Library (Ibm)

References

• https://www.ibm.com/support/pages/node/7292611