CVE-2025-36069: Storage TS4500 Library 1.1.1.6 through 1.12.0.3

Affected technology

Storage TS4500 Library · 1.1.1.6 through 1.12.0.3
IBM

Description’s affected range: through 1.12.0.3 does not invalidate session after a logout which could

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 3.1): Network (remote) · Low privileges required · User interaction required

What an attacker can do

The source says iBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 does not invalidate session after a logout which could allow an authenticated user to impersonate another user on the system. Vendor/CNA’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality, integrity and availability impact as low.