PT-2025-28213 · Ibm · Ibm Storage Virtualize

CVE-2025-1351

·

Published

2025-07-07

·

Updated

2025-08-14

CVSS v3.1

7.0

High

VectorAV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions: IBM Storage Virtualize versions 8.5 through 8.7
Description: The issue is related to a race condition in the login function, which could allow a user to escalate their privileges to that of another user logging in at the same time.
Recommendations: For versions 8.5 through 8.7, consider restricting access to the login function until a patch is available to prevent potential privilege escalation. As a temporary workaround, monitor user login activities closely to minimize the risk of exploitation.

Fix

LPE

Race Condition

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2025-10479
CVE-2025-1351

Affected Products

Ibm Storage Virtualize