CVE-2025-36252: Storage TS4500 Library 1.1.1.6 through 1.12.0.3

Affected technology

Storage TS4500 Library · 1.1.1.6 through 1.12.0.3
IBM

Description’s affected range: through 1.12.0.3 IBM TS4500 Tape Library/Diamondback Tape Library does not invalidate session which could

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 3.1): Network (remote) · Low privileges required · No user interaction required

What an attacker can do

An authenticated user could impersonate another user on the system. Vendor/CNA’s CVSS 3.1 assessment (base score 6.3/10) rates confidentiality, integrity and availability impact as low.