๐Ÿ” CVE Alert

CVE-2025-1351

MEDIUM 6.7

IBM Storage Virtualize privilege escalation

CVSS Score
6.7
EPSS Score
0.0%
EPSS Percentile
0th

IBM Storage Virtualize 8.5, 8.6, and 8.7 products could allow a user to escalate their privileges to that of another user logging in at the same time due to a race condition in the login function.

CWE CWE-362
Vendor ibm
Product storage virtualize
Published Jul 7, 2025
Last Updated Feb 26, 2026
Stay Ahead of the Next One

Get instant alerts for ibm storage virtualize

Be the first to know when new medium vulnerabilities affecting ibm storage virtualize are published โ€” delivered to Slack, Telegram or Discord.

Get Free Alerts โ†’ Free ยท No credit card ยท 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
Attack Vector
Local
Attack Complexity
High
Privileges Required
Low
User Interaction
Required
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Affected Versions

IBM / Storage Virtualize
8.5 8.6 8.7

References

NVD โ†— CVE.org โ†— EPSS Data โ†—
ibm.com: https://www.ibm.com/support/pages/node/7237157