Vulnerabilidades do Ibm Ds8a00 Firmware

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Ibm Ds8a00 Firmware: 4 registro(s), com versões afetadas e correções.
cpe:2.3:o:ibm:ds8a00_firmware

CVE-2025-36398 Média · 5.4 CWE-73 19/08/2026

DS8900F and DS8A00 Information Disclosure

IBM System Storage DS8A00 10.1.3.0 through 10.11.35.0 and IBM DS8900F 89.40.83.0 through 89.44.25.0 could allow an authenticated user to read or modify another user's command history due to an externally controlled filename.

CVE-2025-36255 Alta · 8.8 CWE-267 19/08/2026

DS8900F and DS8A00 Privilege Escalation

IBM System Storage DS8A00 10.1.3.0 through 10.11.35.0 and IBM DS8900F 89.40.83.0 through 89.44.25.0 could allow an authenticated user to create a user with privileged user roles due to improper privileged defined with unsafe actions.

CVE-2025-36254 Alta · 7.4 CWE-116 19/08/2026

DS8900F and DS8A00 Authentication Bypass

IBM System Storage DS8A00 10.1.3.0 through 10.11.35.0 and IBM DS8900F 89.40.83.0 through 89.44.25.0 could allow an attacker to bypass security authentication due to improperly encoding of DSCLI command output to obtain sensitive information or cause a denial of service.

CVE-2025-36192 Alta · 7.1 CWE-862 26/12/2025

Missing Authorization with the DS8900F and DS8A00 Hardware Management Console

IBM DS8A00( R10.1) 10.10.106.0 and IBM DS8A00 ( R10.0) 10.1.3.010.2.45.0 and IBM DS8900F ( R9.4) 89.40.83.089.42.18.089.44.5.0 IBM System Storage DS8000 could allow a local user with authorized CCW update permissions to delete or corrupt backups due to missing authorization in IBM Safeguarded Copy / GDPS Logical corruption protection mechanisms.