CVEvulnerability

CVE-2025-36398

5.4 MEDIUM Published 2026-08-19 Modified 2026-09-29 Official page ↗
Status
Analyzed
Published
2026-08-19
Last modified
2026-09-29
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.4 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Weaknesses
CWE-73

Description

IBM System Storage DS8A00 10.1.3.0 through 10.11.35.0 and IBM DS8900F 89.40.83.0 through 89.44.25.0 could allow an authenticated user to read or modify another user's command history due to an externally controlled filename.

Affected configurations

• ibm ds8900f firmware (>= 89.40.83.0 <= 89.44.25.0) • ibm ds8a00 firmware (>= 10.1.3.0 <= 10.11.35.0)

Related

Weakness · CWE (1)

  • CWE-73 External Control of File Name or Path weakness

References