5.4

CVE-2025-36398

DS8900F and DS8A00 Information Disclosure

IBM System Storage DS8A00 10.1.3.0 through 10.11.35.0 and IBM DS8900F 89.40.83.0 through 89.44.25.0 could allow an authenticated user to read or modify another user's command history due to an externally controlled filename.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Ds8900f Firmware Version >= 89.40.83.0 <= 89.44.25.0
   Ibm ≫ Ds8900f Version -
Ibm ≫ Ds8a00 Firmware Version >= 10.1.3.0 <= 10.11.35.0
   Ibm ≫ Ds8a00 Version -
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.19% 0.091
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
IBM 5.4 2.8 2.5
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
CWE-73 External Control of File Name or Path

The product allows user input to control or influence paths or file names that are used in filesystem operations.

https://www.ibm.com/support/pages/node/7284322
Vendor Advisory