CVE-2025-36120 IBM Storage Virtualize privilege escalation

IBM Storage Virtualize 8.4, 8.5, 8.6, and 8.7 could allow an authenticated user to escalate their privileges in an SSH session due to incorrect authorization checks to access resources...

CVE-2025-36120

IBM Storage Virtualize 8.4, 8.5, 8.6, and 8.7 could allow an authenticated user to escalate their privileges in an SSH session due to incorrect authorization checks to access resources...

IBM Storage Virtualize 安全漏洞

IBM Storage Virtualize is a software-defined storage solution from International Business Machines IBM. A security vulnerability exists in IBM Storage Virtualize versions 8.4, 8.5, 8.6, and 8.7 that stems from improper authorization checking and could result in elevated privileges...

Malicious code in virtualize-long-deserialize-permission-user (npm)

The package virtualize-long-deserialize-permission-user was found to contain malicious code...

Malicious code in virtualize-balance-lambda-pipe-validate (npm)

The package virtualize-balance-lambda-pipe-validate was found to contain malicious code...

Malicious code in virtualize-encode-fire-sudo-finally (npm)

The package virtualize-encode-fire-sudo-finally was found to contain malicious code...

MAL-2025-31295 Malicious code in quick-old-grep-virtualize-xml (npm)

The package quick-old-grep-virtualize-xml was found to contain malicious code...

Malicious code in lambda-fast-yaml-quick-virtualize (npm)

The package lambda-fast-yaml-quick-virtualize was found to contain malicious code...

Malicious code in log-final-public-upsilon-virtualize (npm)

The package log-final-public-upsilon-virtualize was found to contain malicious code...

MAL-2025-38456 Malicious code in virtualize-long-deserialize-permission-user (npm)

The package virtualize-long-deserialize-permission-user was found to contain malicious code...

Malicious code in quick-old-grep-virtualize-xml (npm)

The package quick-old-grep-virtualize-xml was found to contain malicious code...

MAL-2025-38454 Malicious code in virtualize-balance-lambda-pipe-validate (npm)

The package virtualize-balance-lambda-pipe-validate was found to contain malicious code...

Malicious code in grep-emulate-cold-virtualize-file (npm)

The package grep-emulate-cold-virtualize-file was found to contain malicious code...

MAL-2025-24939 Malicious code in lambda-fast-yaml-quick-virtualize (npm)

The package lambda-fast-yaml-quick-virtualize was found to contain malicious code...

MAL-2025-38455 Malicious code in virtualize-encode-fire-sudo-finally (npm)

The package virtualize-encode-fire-sudo-finally was found to contain malicious code...

CVE-2025-1351

IBM Storage Virtualize 8.5, 8.6, and 8.7 products could allow a user to escalate their privileges to that of another user logging in at the same time due to a race condition in the login function...

CVE-2025-1351

IBM Storage Virtualize versions 8.5–8.7 are affected by a race-condition in the login function that could allow a user to escalate privileges to another active session. Remediation from IBM’s security bulletin replaces vulnerable code with fixed versions: 8.5.x: up to 8.5.0.15; 8.5.1.0 and 8.5.2....

CVE-2025-1351

IBM Storage Virtualize 8.5, 8.6, and 8.7 products could allow a user to escalate their privileges to that of another user logging in at the same time due to a race condition in the login function...

CVE-2025-1351 IBM Storage Virtualize privilege escalation

IBM Storage Virtualize 8.5, 8.6, and 8.7 products could allow a user to escalate their privileges to that of another user logging in at the same time due to a race condition in the login function...

IBM Storage Virtualize 竞争条件问题漏洞

IBM Storage Virtualize is a software-defined storage solution from International Business Machines IBM. A Competitive Condition Issue vulnerability exists in IBM Storage Virtualize versions 8.5, 8.6, and 8.7, which originates from a competitive condition in the login function and could lead to...