EUVD-2025-210744

IBM System Storage DS8A00 10.1.3.0 through 10.11.35.0 and IBM DS8900F 89.40.83.0 through 89.44.25.0 could allow an authenticated user to create a user with privileged user roles due to improper privileged defined with unsafe actions...

CVE-2025-36192: Missing Authorization

IBM DS8A00 R10.1 10.10.106.0 and IBM DS8A00 R10.0 10.1.3.010.2.45.0 and IBM DS8900F R9.4 89.40.83.089.42.18.089.44.5.0 IBM System Storage DS8000 could allow a local user with authorized CCW update permissions to delete or corrupt backups due to missing authorization in IBM Safeguarded Copy / GDPS...

PT-2022-10808

Name of the Vulnerable Software and Affected Versions IBM System Storage DS8000 Management Console HMC versions 88.5x.x.x through 89.2x.0.0 Description The issue allows a remote attacker to obtain sensitive information through unpublished URLs. Recommendations For versions 88.5x.x.x through...

PT-2022-10806

Name of the Vulnerable Software and Affected Versions IBM System Storage DS8000 Management Console HMC versions 88.5x.x.x through 89.2x.0.0 Description The issue allows a remote attacker to obtain sensitive information through unpublished URLs. Recommendations For versions 88.5x.x.x through...

CVE-2021-38929: Undefined Security Weakness

IBM System Storage DS8000 Management Console HMC R8.5 88.5x.x.x, R9.1 89.1x.0.0, and R9.2 89.2x.0.0 could allow a remote attacker to obtain sensitive information through unpublished URLs. IBM X-Force ID: 210330...

CVE-2021-38930: Undefined Security Weakness

IBM System Storage DS8000 Management Console HMC R8.5 88.5x.x.x, R9.1 89.1x.0.0, and R9.2 89.2x.0.0 could allow a remote attacker to obtain sensitive information through unpublished URLs. IBM X-Force ID: 210331...