CVE-2025-36120

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-36120
IBM Storage Virtualize 8.4, 8.5, 8.6, and 8.7 could allow an authenticated user to escalate their privileges in an SSH session due to incorrect authorization checks to access resources.

8.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://www.ibm.com/support/pages/node/7240796 Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:ibm:storage_virtualize:*:*:*:*:*:*:*:*
cpe:2.3:a:ibm:storage_virtualize:*:*:*:*:*:*:*:*
cpe:2.3:a:ibm:storage_virtualize:*:*:*:*:*:*:*:*
cpe:2.3:a:ibm:storage_virtualize:*:*:*:*:*:*:*:*
cpe:2.3:a:ibm:storage_virtualize:*:*:*:*:*:*:*:*
cpe:2.3:a:ibm:storage_virtualize:*:*:*:*:*:*:*:*
cpe:2.3:a:ibm:storage_virtualize:8.4.1.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:storage_virtualize:8.4.2.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:storage_virtualize:8.4.2.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:storage_virtualize:8.4.3.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:storage_virtualize:8.5.1.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:storage_virtualize:8.5.3.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:storage_virtualize:8.5.3.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:storage_virtualize:8.5.4.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:storage_virtualize:8.6.1.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:storage_virtualize:8.6.2.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:storage_virtualize:8.6.2.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:storage_virtualize:8.6.3.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:storage_virtualize:8.7.1.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:storage_virtualize:8.7.2.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:storage_virtualize:8.7.2.1:*:*:*:*:*:*:*
History

21 Aug 2025, 19:25

Type Values Removed Values Added
CPE cpe:2.3:a:ibm:storage_virtualize:8.4.2.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:storage_virtualize:8.7.1.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:storage_virtualize:8.5.1.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:storage_virtualize:8.5.4.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:storage_virtualize:8.5.3.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:storage_virtualize:*:*:*:*:*:*:*:*
cpe:2.3:a:ibm:storage_virtualize:8.6.1.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:storage_virtualize:8.7.2.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:storage_virtualize:8.4.2.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:storage_virtualize:8.5.3.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:storage_virtualize:8.6.2.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:storage_virtualize:8.4.1.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:storage_virtualize:8.6.3.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:storage_virtualize:8.4.3.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:storage_virtualize:8.6.2.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:storage_virtualize:8.7.2.1:*:*:*:*:*:*:*
Summary
  • (es) IBM Storage Virtualize 8.4, 8.5, 8.6 y 8.7 podrían permitir que un usuario autenticado aumente sus privilegios en una sesión SSH debido a verificaciones de autorización incorrectas para acceder a los recursos.
References () https://www.ibm.com/support/pages/node/7240796 - () https://www.ibm.com/support/pages/node/7240796 - Vendor Advisory
First Time Ibm
Ibm storage Virtualize

18 Aug 2025, 14:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-08-18 14:15

Updated : 2025-08-21 19:25

NVD link : CVE-2025-36120

Mitre link : CVE-2025-36120

CVE.ORG link : CVE-2025-36120

JSON object : View

Products Affected

ibm

  • storage_virtualize
CWE
CWE-863

Incorrect Authorization