Skip to content
OpenAdvisories
Medium · 5.4 CVE-2025-36398 EUVD-2025-210743GHSA-8mjv-2344-rw9g

DS8900F and DS8A00 Information Disclosure

Published Aug 19, 2026 · Updated Aug 20, 2026 · Assigned by ibm

Description

IBM System Storage DS8A00 10.1.3.0 through 10.11.35.0 and IBM DS8900F 89.40.83.0 through 89.44.25.0 could allow an authenticated user to read or modify another user's command history due to an externally controlled filename.

Affected products

VendorProductAffectedFixed
IBM DS8A00 (R10.0 - R10.1) 10.1.3.0 – ≤ 10.11.35.0 —
IBM DS8900F (R9.4) 89.40.83.0 – ≤ 89.44.25.0 —

References