Summary
Ein Angreifer kann mehrere Schwachstellen in IBM Tape Library ausnutzen, um Sicherheitsvorkehrungen zu umgehen, und um seine Privilegien zu erhöhen.
Product
IBM Tape Library Produkte sind Bandspeicherlösungen.
Vulnerabilities 3
-
Medium 6.8
TS4500 Tape Library Race Condition
IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 could allow a remote authenticated attacker to gain unauthorized administrative privileges due to a race condition.
-
Medium 6.3
TS4500 Tape Library Insufficient Session Expiration
IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 IBM TS4500 Tape Library/Diamondback Tape Library does not invalidate session which could allow an authenticated user to impersonate another user on the system.
-
Medium 5.5
TS4500 Tape Library Insufficient Session Expiration
IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 does not invalidate session after a logout which could allow an authenticated user to impersonate another user on the system.
Revision history
-
#1
Initiale Fassung
References
-
IBM Security Bulletin 7296155 vom 2026-11-10
https://www.ibm.com/support/pages/node/7296155
-
IBM Security Bulletin 7296158 vom 2026-11-10
https://www.ibm.com/support/pages/node/7296158
-
IBM Security Bulletin 7296159 vom 2026-11-10
https://www.ibm.com/support/pages/node/7296159