← Back

CVE-2025-36255

nvd nist
Published: Aug 19, 2026Modified: Aug 24, 2026

JSON object

Loading...
8.8
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 2.8 / Impact: 5.9
Source: NVD

Description

IBM System Storage DS8A00 10.1.3.0 through 10.11.35.0 and IBM DS8900F 89.40.83.0 through 89.44.25.0 could allow an authenticated user to create a user with privileged user roles due to improper privileged defined with unsafe actions.

Affected (2)

Ibm
2 products
Ds8900f Firmware
Ds8a00 Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Ds8900f Firmware
From 89.40.83.0 to 89.44.25.0
Running on/withPlatform Versions
Ibm
Ds8900f
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Ds8a00 Firmware
From 10.1.3.0 to 10.11.35.0
Running on/withPlatform Versions
Ibm
Ds8a00
All versions

Related CWEs

CWE-267
Privilege Defined With Unsafe Actions
A particular privilege, role, capability, or right can be used to perform unsafe actions that were not intended, even when it is assigned to the correct entity.

References (1)

Source: psirt@us.ibm.com
Vendor Advisory

Timeline

No history available yet.