Skip to content
OpenAdvisories
Medium WID-SEC-2026-4389 3 CVEs

IBM Storage Scale: Mehrere Schwachstellen

Published Nov 8, 2026 · Updated Nov 8, 2026 · de

Vendor: IBM Product: Storage Scale Platform: Linux Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in IBM Storage Scale ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um Informationen offenzulegen, und um Dateien zu manipulieren.

Product

IBM Storage Scale ist eine Lösung für das Management großer unstrukturierter Datenmengen.

Vulnerabilities 3

  • Medium 6.5
    CVE-2026-14437

    IBM Storage Scale Path Traversal

    IBM Storage Scale 5.2.3.0 through 5.2.3.9 and 6.0.1.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system.

    IBM Storage Scale Container Native and CSI
  • Medium 5.9
    CVE-2026-14375

    The following vulnerabilities that can affect IBM Storage Scale Install Toolkit are now fixed in 5.2.3.9 or higher and 6.0.1.1 or higher

    IBM Storage Scale 5.2.3.0 through 5.2.3.8, and 6.0.1.0 does not validate or improperly validates TLS certificate validation when communicating with remote cluster GUI interfaces, which could allow an attacker to inject forged JSON responses using man in the m…

    IBM Storage Scale
  • Medium 5.4
    CVE-2026-14469

    IBM Storage Scale Incorrect Authorization

    IBM Storage Scale 5.2.3.0 through 5.2.3.9 and 6.0.1.0 could allow an authenticated attacker to access and manipulate filesets beyond their control due to improper authorization.

    IBM Storage Scale Container Native and CSI

Revision history

  1. #1

    Initiale Fassung

References