Description
IBM Storage Scale System 6.2.3.0 through 6.2.3.6, and 7.0.0.0 through 7.0.1.0 and IBM Storage Scale 6.0.0.0 through 6.0.1.0, and 5.2.3.0 through 5.2.3.8 could allow an attacker to leverage an undocumented flag to gain access to an unauthenticated path in the REST API.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| IBM | Storage Scale System | 6.2.3.0 – ≤ 6.2.3.6, 7.0.0.0 – ≤ 7.0.1.0 | — |
| IBM | Storage Scale | 6.0.0.0 – ≤ 6.0.1.0, 5.2.3.0 – ≤ 5.2.3.8 | — |
Advisories 1
- WID-SEC-2026-4293 IBM Storage Scale: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen BSI CERT-Bund (WID) · Nov 8, 2026
References
- https://www.ibm.com/support/pages/node/7295211 vendor-advisory patch