AI and data stack advisories

Severe, 6 weeks977Projects326

977 severe, 6 weeks · 326 projects

IBMCVE-2025-36069

IBM Storage TS4500 Library: insufficient session expiration

IBM

CVE-2025-36069 · Published Oct 19, 2026 · updated Oct 28, 2026

Medium5.5
No fix yet
IBM advisory

IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 does not invalidate session after a logout which could allow an authenticated user to impersonate another user on the system.

Affected versions

PackageAffectedFixed in
Storage TS4500 Library
Product
>= 1.1.1.6, <= 1.12.0.3No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-613

More IBM advisories

All IBM
Critical 10.0Oct 20IBM DataStage on Cloud Pak for Data: improper authorizationCVE-2026-81212no fix yetMedium 6.5Oct 19IBM Storage TS4500 Library: denial of serviceCVE-2025-36061no fix yetMedium 6.3Oct 19IBM Storage TS4500 Library: insufficient session expirationCVE-2025-36252no fix yetHigh 7.4Oct 1IBM confluent-kafka: information disclosureCVE-2026-15911no fix yetHigh 8.1Sep 29IBM Guardium Data Protection: path traversalCVE-2026-84842no fix yetHigh 7.8Sep 29IBM i: insecure permissionsCVE-2026-84414no fix yet