Ds8900F R9 4
Monthly
Authentication bypass in IBM System Storage DS8A00 (firmware 10.1.3.0-10.11.35.0) and DS8900F (firmware 89.40.83.0-89.44.25.0) exposes enterprise storage array management interfaces to network-reachable attackers who can circumvent security controls without valid credentials, enabling exfiltration of sensitive management data or availability disruption. The root cause is CWE-116 (Improper Encoding or Escaping of Output) in DSCLI command output processing, where encoding defects allow authentication logic to be bypassed. No public exploit code has been identified at time of analysis, and a vendor patch is available via IBM's security advisory.
Privilege escalation in IBM System Storage DS8A00 (R10.0-R10.1, firmware 10.1.3.0-10.11.35.0) and IBM DS8900F (R9.4, firmware 89.40.83.0-89.44.25.0) permits low-privileged authenticated users to create accounts bearing full administrative roles, effectively seizing control of enterprise storage infrastructure. The flaw stems from CWE-267 (Privilege Defined With Unsafe Actions), where the user-management subsystem fails to enforce boundaries on the privilege levels assignable by non-administrative roles. No public exploit has been identified at time of analysis; EPSS is 0.25% (17th percentile) and SSVC records exploitation status as none, consistent with the absence of CISA KEV listing.
Cross-user command history exposure in IBM System Storage DS8A00 (10.1.3.0-10.11.35.0) and DS8900F (89.40.83.0-89.44.25.0) allows a low-privileged authenticated user to read or overwrite another user's command history through externally controlled filename manipulation. Rooted in CWE-73 (External Control of File Name or Path), the flaw enables horizontal privilege escalation within the storage management interface without requiring elevated rights or user interaction. IBM has released a patch; no public exploit or CISA KEV listing has been identified.
Authentication bypass in IBM System Storage DS8A00 (firmware 10.1.3.0-10.11.35.0) and DS8900F (firmware 89.40.83.0-89.44.25.0) exposes enterprise storage array management interfaces to network-reachable attackers who can circumvent security controls without valid credentials, enabling exfiltration of sensitive management data or availability disruption. The root cause is CWE-116 (Improper Encoding or Escaping of Output) in DSCLI command output processing, where encoding defects allow authentication logic to be bypassed. No public exploit code has been identified at time of analysis, and a vendor patch is available via IBM's security advisory.
Privilege escalation in IBM System Storage DS8A00 (R10.0-R10.1, firmware 10.1.3.0-10.11.35.0) and IBM DS8900F (R9.4, firmware 89.40.83.0-89.44.25.0) permits low-privileged authenticated users to create accounts bearing full administrative roles, effectively seizing control of enterprise storage infrastructure. The flaw stems from CWE-267 (Privilege Defined With Unsafe Actions), where the user-management subsystem fails to enforce boundaries on the privilege levels assignable by non-administrative roles. No public exploit has been identified at time of analysis; EPSS is 0.25% (17th percentile) and SSVC records exploitation status as none, consistent with the absence of CISA KEV listing.
Cross-user command history exposure in IBM System Storage DS8A00 (10.1.3.0-10.11.35.0) and DS8900F (89.40.83.0-89.44.25.0) allows a low-privileged authenticated user to read or overwrite another user's command history through externally controlled filename manipulation. Rooted in CWE-73 (External Control of File Name or Path), the flaw enables horizontal privilege escalation within the storage management interface without requiring elevated rights or user interaction. IBM has released a patch; no public exploit or CISA KEV listing has been identified.