CVE-2025-36120
IBM Storage Virtualize privilege escalation
- State
- Published
- Severity
- 8.8 High
- Published
- Aug 18, 2025
- Updated
- Feb 26, 2026
- Reserved
- Apr 15, 2025
Description
IBM Storage Virtualize 8.4, 8.5, 8.6, and 8.7 could allow an authenticated user to escalate their privileges in an SSH session due to incorrect authorization checks to access resources.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 8.8 High | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H | ibm |
Weaknesses
- CWE-863 Incorrect Authorization
Affected Products
| Product | Versions |
|---|---|
Storage VirtualizeIBM |
|
References
- https://www.ibm.com/support/pages/node/7240796vendor-advisorypatch
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.