ZeroHour

CVE-2025-36398

CVSS 3.1
5.4 medium
EPSS
<1%p8
Published
()
Modified
Description

IBM System Storage DS8A00 10.1.3.0 through 10.11.35.0 and IBM DS8900F 89.40.83.0 through 89.44.25.0 could allow an authenticated user to read or modify another user's command history due to an externally controlled filename.

Vendors
ibm
Products
ds8900f firmware, ds8a00 firmware
Weakness
CWE-73
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

In the news

No ingested article mentions this CVE yet.