Storage Scale
Monthly
IBM Storage Scale GUI versions 5.2.3.0-5.2.3.8 and 6.0.0.0-6.0.1.0 ship with a hardcoded authentication token embedded in source code, granting any network-reachable attacker the ability to authenticate to the REST API and inter-node cluster communication channels without valid credentials. The static nature of the token means it is identical across every affected deployment, making a single disclosure universally exploitable against all unpatched instances. IBM has released a patch via advisory 7283308, and no public exploit or CISA KEV listing has been identified at time of analysis.
Plaintext credential disclosure in IBM Storage Scale Management GUI allows local users to extract administrator passwords and secrets from log files generated during GUI-initiated deploy and upgrade operations. Affected are Storage Scale versions 5.2.3.0 through 5.2.3.8 and 6.0.0.0 through 6.0.1.0. An attacker with low-privilege local access who can read GUI log files obtains admin credentials, enabling full authenticated takeover of the storage cluster. No public exploit or CISA KEV listing identified at time of analysis, though the attack is low-complexity once local access is established.
IBM Storage Scale IBM S through rage Scale 5.2.3.0 - 5.2.3.5, and IBM S through rage Scale 6.0.0.0 - 6.0.0.1 could allow a local user to unintentionally trigger additional permissions for resources in a way that allows that resource to be executed by unintended actors. [CVSS 6.6 MEDIUM]
IBM Storage Scale 5.2.3.0 and 5.2.3.1 could allow an authenticated user to obtain sensitive information from files due to the insecure permissions inherited through the SMB protocol.
IBM Storage Scale 5.2.2.0 and 5.2.2.1, under certain configurations, could allow an authenticated user to execute privileged commands due to improper input neutralization. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable. No vendor patch available.
IBM Storage Scale GUI 5.1.9.0 through 5.1.9.6 and 5.2.0.0 through 5.2.1.1 could allow a user to perform unauthorized actions after intercepting and modifying a csv file due to improper neutralization. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.
IBM Storage Scale GUI 5.1.9.0 through 5.1.9.6 and 5.2.0.0 through 5.2.1.1 contains a local privilege escalation vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.
IBM Storage Scale GUI versions 5.2.3.0-5.2.3.8 and 6.0.0.0-6.0.1.0 ship with a hardcoded authentication token embedded in source code, granting any network-reachable attacker the ability to authenticate to the REST API and inter-node cluster communication channels without valid credentials. The static nature of the token means it is identical across every affected deployment, making a single disclosure universally exploitable against all unpatched instances. IBM has released a patch via advisory 7283308, and no public exploit or CISA KEV listing has been identified at time of analysis.
Plaintext credential disclosure in IBM Storage Scale Management GUI allows local users to extract administrator passwords and secrets from log files generated during GUI-initiated deploy and upgrade operations. Affected are Storage Scale versions 5.2.3.0 through 5.2.3.8 and 6.0.0.0 through 6.0.1.0. An attacker with low-privilege local access who can read GUI log files obtains admin credentials, enabling full authenticated takeover of the storage cluster. No public exploit or CISA KEV listing identified at time of analysis, though the attack is low-complexity once local access is established.
IBM Storage Scale IBM S through rage Scale 5.2.3.0 - 5.2.3.5, and IBM S through rage Scale 6.0.0.0 - 6.0.0.1 could allow a local user to unintentionally trigger additional permissions for resources in a way that allows that resource to be executed by unintended actors. [CVSS 6.6 MEDIUM]
IBM Storage Scale 5.2.3.0 and 5.2.3.1 could allow an authenticated user to obtain sensitive information from files due to the insecure permissions inherited through the SMB protocol.
IBM Storage Scale 5.2.2.0 and 5.2.2.1, under certain configurations, could allow an authenticated user to execute privileged commands due to improper input neutralization. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable. No vendor patch available.
IBM Storage Scale GUI 5.1.9.0 through 5.1.9.6 and 5.2.0.0 through 5.2.1.1 could allow a user to perform unauthorized actions after intercepting and modifying a csv file due to improper neutralization. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.
IBM Storage Scale GUI 5.1.9.0 through 5.1.9.6 and 5.2.0.0 through 5.2.1.1 contains a local privilege escalation vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.