CVE-2025-36069
TS4500 Tape Library Insufficient Session Expiration
CVSS Score
5.5
EPSS Score
0.0%
EPSS Percentile
0th
IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 does not invalidate session after a logout which could allow an authenticated user to impersonate another user on the system.
| CWE | CWE-613 |
| Vendor | ibm |
| Product | storage ts4500 library |
| Published | Oct 19, 2026 |
Stay Ahead of the Next One
Get instant alerts for ibm storage ts4500 library
Be the first to know when new medium vulnerabilities affecting ibm storage ts4500 library are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
Required
Scope
Unchanged
Confidentiality
Low
Integrity
Low
Availability
Low
Affected Versions
IBM / Storage TS4500 Library
1.1.1.6 ≤ 1.12.0.3