7.4

CVE-2025-36254

DS8900F and DS8A00 Authentication Bypass

IBM System Storage DS8A00 10.1.3.0 through 10.11.35.0 and IBM DS8900F 89.40.83.0 through 89.44.25.0 could allow an attacker to bypass security authentication due to improperly encoding of DSCLI command output to obtain sensitive information or cause a denial of service.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Ds8900f Firmware Version >= 89.40.83.0 <= 89.44.25.0
   Ibm ≫ Ds8900f Version -
Ibm ≫ Ds8a00 Firmware Version >= 10.1.3.0 <= 10.11.35.0
   Ibm ≫ Ds8a00 Version -
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.38% 0.313
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
IBM 7.4 2.2 5.2
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H
CWE-116 Improper Encoding or Escaping of Output

The product prepares a structured message for communication with another component, but encoding or escaping of the data is either missing or done incorrectly. As a result, the intended structure of the message is not preserved.

https://www.ibm.com/support/pages/node/7284322
Vendor Advisory