Skip to content
OpenAdvisories
Medium WID-SEC-2026-2786 2 CVEs

IBM Storage Scale: Mehrere Schwachstellen

Published Aug 11, 2026 · Updated Oct 12, 2026 · Revision 3 · de-DE

Vendor: IBM Product: i Product: Storage Scale Platform: Linux Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in IBM Storage Scale ausnutzen, um Sicherheitsvorkehrungen zu umgehen, und um Informationen offenzulegen.

Product

IBM Storage Scale ist eine Lösung für das Management großer unstrukturierter Datenmengen.

Vulnerabilities 2

  • High 7.5
    CVE-2026-13460

    The following vulnerabilities that can affect IBM Storage Scale and the Management GUI are now fixed in 5.2.3.9 or higher and 6.0.1.1 or higher

    IBM Storage Scale 5.2.3.0 through 5.2.3.8, and 6.0.0.0 through 6.0.1.0 GUI contains a hardcoded token in the source code, which was used for inter-node cluster communication and REST API authentication between GUI.

    IBM Storage Scale
  • High 7.1
    CVE-2026-19483

    The following vulnerabilities that can affect IBM Storage Scale and the Management GUI are now fixed in 5.2.3.9 or higher and 6.0.1.1 or higher

    IBM Storage Scale 5.2.3.0 through 5.2.3.8, and 6.0.0.0 through 6.0.1.0 Secrets may be disclosed in log files in IBM Storage Scale Management GUI The admin password is logged into the GUI log of IBM Storage Scale Systems Deploy and Upgrade from GUI. Secrets ma…

    IBM Storage Scale

Revision history

  1. #3

    Neue Updates von IBM aufgenommen

  2. #2

    Referenz(en) aufgenommen: EUVD-2026-58361, EUVD-2026-58476

  3. #1

    Initiale Fassung

References