What is the CVSS score of CVE-2025-36398?

CVE-2025-36398 has a CVSS 3.1 base score of 5.4 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N. EPSS exploitation probability: 0.2%.

Is there a patch available for CVE-2025-36398?

Yes, a patch is available for CVE-2025-36398. Update the affected software to the latest version immediately.

IBM DS8 Storage CVE-2025-36398

EUVD-2025-210743 MEDIUM

External Control of File Name or Path (CWE-73)

2026-08-19 ibm

GHSA-8mjv-2344-rw9g

Information Disclosure IBM Ds8A00 R10 0 R10 1 Ds8900F R9 4

5.4

CVSS 3.1 · Vendor: ibm

Severity by source

Vendor (ibm) PRIMARY

5.4 MEDIUM

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

vuln.today AI

5.4 MEDIUM

Authenticated network access required (PR:L/AV:N); impact limited to cross-user history read/write with no availability or scope change.

3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (ibm).

CVSS VectorVendor: ibm

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

Low

Availability

None

Lifecycle Timeline

Analysis Generated

Aug 19, 2026 - 22:43 vuln.today

DescriptionCVE.org

IBM System Storage DS8A00 10.1.3.0 through 10.11.35.0 and IBM DS8900F 89.40.83.0 through 89.44.25.0 could allow an authenticated user to read or modify another user's command history due to an externally controlled filename.

AnalysisAI

Cross-user command history exposure in IBM System Storage DS8A00 (10.1.3.0-10.11.35.0) and DS8900F (89.40.83.0-89.44.25.0) allows a low-privileged authenticated user to read or overwrite another user's command history through externally controlled filename manipulation. Rooted in CWE-73 (External Control of File Name or Path), the flaw enables horizontal privilege escalation within the storage management interface without requiring elevated rights or user interaction. IBM has released a patch; no public exploit or CISA KEV listing has been identified.

Technical ContextAI

CWE-73 (External Control of File Name or Path) describes a class of vulnerability where user-supplied input directly influences file path construction without adequate sanitization or access control enforcement. In this case, the IBM DS8A00 and DS8900F enterprise SAN storage platforms - covering firmware release families R10.0/R10.1 and R9.4 respectively - expose a management interface that stores per-user command history in files whose names or paths can be influenced by an authenticated caller. By manipulating the filename parameter, an attacker can redirect file operations to another user's history store. The IBM DS8 series are high-end storage area network (SAN) systems typically found in large enterprise and financial-sector data centers, making the management interface a sensitive administrative target.

RemediationAI

Apply the IBM-issued patch per the vendor advisory at https://www.ibm.com/support/pages/node/7284322. The advisory confirms patch availability, but the exact remediated firmware version is not specified in the reference data provided - administrators should consult the advisory directly to identify the target upgrade version for their release family (R10.x for DS8A00, R9.4 for DS8900F). As a compensating control where immediate patching is not possible, restrict management interface access to a dedicated administrative VLAN and enforce strict role separation so that the number of concurrent authenticated users with command-history access is minimized. Auditing access logs for unexpected cross-user file access patterns may help detect exploitation attempts in the interim.