Ibm Storage Scale vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Ibm Storage Scale: 3 record(s), with affected versions and fixes.
cpe:2.3:a:ibm:storage_scale

CVE-2026-19483 Medium · 5.5 CWE-532 Aug 13, 2026

Insertion of Sensitive Information into Log File in Ibm Storage Scale

IBM Storage Scale 5.2.3.0 through 5.2.3.8, and 6.0.0.0 through 6.0.1.0 Secrets may be disclosed in log files in IBM Storage Scale Management GUI The admin password is logged into the GUI log of IBM Storage Scale Systems Deploy and Upgrade from GUI. Secrets may be disclosed in information related to exceptions in IBM Storage Scale Management GUI.

CVE-2026-13460 High · 7.5 CWE-798 Aug 13, 2026

Use of Hard-coded Credentials in Ibm Storage Scale

IBM Storage Scale 5.2.3.0 through 5.2.3.8, and 6.0.0.0 through 6.0.1.0 GUI contains a hardcoded token in the source code, which was used for inter-node cluster communication and REST API authentication between GUI.

CVE-2025-14604 High · 7.8 CWE-732 Mar 3, 2026

The following vulnerabilities, which may affect IBM Storage Scale when a directory has a specific ACL composition and could lead to improper execute permissions, have been remediated in Storage Scale versions 5.2.3.6 and 6.0.0.2

IBM Storage Scale IBM S through rage Scale 5.2.3.0 - 5.2.3.5, and IBM S through rage Scale 6.0.0.0 - 6.0.0.1 could allow a local user to unintentionally trigger additional permissions for resources in a way that allows that resource to be executed by unintended actors.