Storage Ts4500 Library
Monthly
Denial of service in IBM Storage TS4500 Library and IBM Diamondback Tape Library firmware versions 1.1.1.6 through 1.12.0.3 allows an authenticated low-privilege user to exhaust system resources by sending specially crafted SMTP requests to the library's email/notification management interface. The issue is a moderate, not top-tier, priority because authentication is mandatory, impact is limited to availability, and the appliance is typically internal rather than internet-exposed; no public exploit was identified at time of analysis. A vendor patch is available per IBM advisory node/7292612.
IBM Storage TS4500 Library versions 1.1.1.6 through 1.12.0.3 fail to invalidate a session after logout, allowing an authenticated user who obtains or retains a still-valid session identifier to impersonate another user. Exploitation requires a second user to have logged out and the attacker to possess that session token, so impact is limited to multi-user or insider scenarios and the issue is moderate severity/low urgency. Patch is available per IBM advisory node/7292613; no public exploit identified at time of analysis.
IBM TS4500 Library firmware 1.1.1.6 through 1.12.0.3 fails to invalidate sessions, allowing an authenticated attacker who retains a usable session identifier to impersonate another user on the library management interface. CVSS 3.1 scores this 6.3 with vector AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L, meaning exploitation requires an authenticated session and is bounded to limited confidentiality, integrity, and availability impact. No public exploit identified at time of analysis, and IBM has published a vendor patch advisory.
A race condition in IBM Storage TS4500 Library firmware versions 1.1.1.6 through 1.12.0.3 lets a remote, low-privileged authenticated user escalate to administrative privileges by timing an operation against a concurrent privileged action. The flaw is a privilege-escalation issue rather than a pre-authentication bypass, since valid credentials for the library management interface are mandatory, and successful exploitation depends on winning a non-deterministic race that may require repeated attempts. IBM has released a fix; no public exploit code or confirmed active exploitation was identified at time of analysis, and the EPSS-style risk profile places this as a patch-on-a-normal-cycle item.
Denial of service in IBM Storage TS4500 Library and IBM Diamondback Tape Library firmware versions 1.1.1.6 through 1.12.0.3 allows an authenticated low-privilege user to exhaust system resources by sending specially crafted SMTP requests to the library's email/notification management interface. The issue is a moderate, not top-tier, priority because authentication is mandatory, impact is limited to availability, and the appliance is typically internal rather than internet-exposed; no public exploit was identified at time of analysis. A vendor patch is available per IBM advisory node/7292612.
IBM Storage TS4500 Library versions 1.1.1.6 through 1.12.0.3 fail to invalidate a session after logout, allowing an authenticated user who obtains or retains a still-valid session identifier to impersonate another user. Exploitation requires a second user to have logged out and the attacker to possess that session token, so impact is limited to multi-user or insider scenarios and the issue is moderate severity/low urgency. Patch is available per IBM advisory node/7292613; no public exploit identified at time of analysis.
IBM TS4500 Library firmware 1.1.1.6 through 1.12.0.3 fails to invalidate sessions, allowing an authenticated attacker who retains a usable session identifier to impersonate another user on the library management interface. CVSS 3.1 scores this 6.3 with vector AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L, meaning exploitation requires an authenticated session and is bounded to limited confidentiality, integrity, and availability impact. No public exploit identified at time of analysis, and IBM has published a vendor patch advisory.
A race condition in IBM Storage TS4500 Library firmware versions 1.1.1.6 through 1.12.0.3 lets a remote, low-privileged authenticated user escalate to administrative privileges by timing an operation against a concurrent privileged action. The flaw is a privilege-escalation issue rather than a pre-authentication bypass, since valid credentials for the library management interface are mandatory, and successful exploitation depends on winning a non-deterministic race that may require repeated attempts. IBM has released a fix; no public exploit code or confirmed active exploitation was identified at time of analysis, and the EPSS-style risk profile places this as a patch-on-a-normal-cycle item.