AI and data stack advisories

Severe, 6 weeks977Projects326

977 severe, 6 weeks · 326 projects

IBMCVE-2025-36252

IBM Storage TS4500 Library: insufficient session expiration

IBM

CVE-2025-36252 · Published Oct 19, 2026 · updated Oct 28, 2026

Medium6.3
No fix yet
IBM advisory

IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 IBM TS4500 Tape Library/Diamondback Tape Library does not invalidate session which could allow an authenticated user to impersonate another user on the system.

Affected versions

PackageAffectedFixed in
Storage TS4500 Library
Product
>= 1.1.1.6, <= 1.12.0.3No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-613

More IBM advisories

All IBM
Critical 10.0Oct 20IBM DataStage on Cloud Pak for Data: improper authorizationCVE-2026-81212no fix yetMedium 6.5Oct 19IBM Storage TS4500 Library: denial of serviceCVE-2025-36061no fix yetMedium 5.5Oct 19IBM Storage TS4500 Library: insufficient session expirationCVE-2025-36069no fix yetHigh 7.4Oct 1IBM confluent-kafka: information disclosureCVE-2026-15911no fix yetHigh 8.1Sep 29IBM Guardium Data Protection: path traversalCVE-2026-84842no fix yetHigh 7.8Sep 29IBM i: insecure permissionsCVE-2026-84414no fix yet