Vulnerabilidades do Ibm Storage Scale

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Ibm Storage Scale: 3 registro(s), com versões afetadas e correções.
cpe:2.3:a:ibm:storage_scale

CVE-2026-19483 Média · 5.5 CWE-532 13/08/2026

Insertion of Sensitive Information into Log File em Ibm Storage Scale

IBM Storage Scale 5.2.3.0 through 5.2.3.8, and 6.0.0.0 through 6.0.1.0 Secrets may be disclosed in log files in IBM Storage Scale Management GUI The admin password is logged into the GUI log of IBM Storage Scale Systems Deploy and Upgrade from GUI. Secrets may be disclosed in information related to exceptions in IBM Storage Scale Management GUI.

CVE-2026-13460 Alta · 7.5 CWE-798 13/08/2026

Use of Hard-coded Credentials em Ibm Storage Scale

IBM Storage Scale 5.2.3.0 through 5.2.3.8, and 6.0.0.0 through 6.0.1.0 GUI contains a hardcoded token in the source code, which was used for inter-node cluster communication and REST API authentication between GUI.

CVE-2025-14604 Alta · 7.8 CWE-732 03/03/2026

The following vulnerabilities, which may affect IBM Storage Scale when a directory has a specific ACL composition and could lead to improper execute permissions, have been remediated in Storage Scale versions 5.2.3.6 and 6.0.0.2

IBM Storage Scale IBM S through rage Scale 5.2.3.0 - 5.2.3.5, and IBM S through rage Scale 6.0.0.0 - 6.0.0.1 could allow a local user to unintentionally trigger additional permissions for resources in a way that allows that resource to be executed by unintended actors.