← CVE Intelligence

CVE-2025-36192

Missing Authorization with the DS8900F and DS8A00 Hardware Management Console PUBLISHED

Description (CNA)

IBM DS8A00( R10.1) 10.10.106.0 and IBM DS8A00 ( R10.0) 10.1.3.010.2.45.0 and IBM DS8900F ( R9.4) 89.40.83.089.42.18.089.44.5.0 IBM System Storage DS8000 could allow a local user with authorized CCW update permissions to delete or corrupt backups due to missing authorization in IBM Safeguarded Copy / GDPS Logical corruption protection mechanisms.

Affected (CNA)

Vendor / productVersions
IBM / DS8A00( R10.1)affected 10.10.106.0
IBM / DS8A00 ( R10.0)affected 10.1.3.0; affected 10.2.45.0
IBM / DS8900F ( R9.4)affected 89.40.83.0; affected 89.42.18.0; affected 89.44.5.0

CWE

CWE-862

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.