CVE-2025-36120

Published: Aug 18, 2025Modified: Aug 21, 2025

8.8

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: psirt@us.ibm.com (Secondary)

Description

IBM Storage Virtualize 8.4, 8.5, 8.6, and 8.7 could allow an authenticated user to escalate their privileges in an SSH session due to incorrect authorization checks to access resources.

Affected (21)

Products: Ibm: Storage Virtualize

Ibm

1 product

Storage Virtualize

Configuration A

21 vulnerable

Vulnerable Software	Affected Versions
Ibm Storage Virtualize	From 8.4.0.0 to 8.4.0.18
Ibm Storage Virtualize	From 8.5.0.0 to 8.5.0.16
Ibm Storage Virtualize	From 8.5.2.0 to 8.5.2.3
Ibm Storage Virtualize	From 8.6.0.0 to 8.6.0.9
Ibm Storage Virtualize	From 8.7.0.0 to 8.7.0.6
Ibm Storage Virtualize	From 8.7.3.0 to 8.7.3.3
Ibm Storage Virtualize	Version 8.4.1.0
Ibm Storage Virtualize	Version 8.4.2.0
Ibm Storage Virtualize	Version 8.4.2.1
Ibm Storage Virtualize	Version 8.4.3.1
Ibm Storage Virtualize	Version 8.5.1.0
Ibm Storage Virtualize	Version 8.5.3.0
Ibm Storage Virtualize	Version 8.5.3.1
Ibm Storage Virtualize	Version 8.5.4.0
Ibm Storage Virtualize	Version 8.6.1.0
Ibm Storage Virtualize	Version 8.6.2.0
Ibm Storage Virtualize	Version 8.6.2.1
Ibm Storage Virtualize	Version 8.6.3.0
Ibm Storage Virtualize	Version 8.7.1.0
Ibm Storage Virtualize	Version 8.7.2.0
Ibm Storage Virtualize	Version 8.7.2.1

Related CWEs

CWE-863

Incorrect Authorization

The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check. This allows attackers to bypass intended access restrictions.

References (1)

https://www.ibm.com/support/pages/node/7240796

Source: psirt@us.ibm.com

Vendor Advisory

Timeline

No history available yet.