CVE-2025-36069 — TS4500 Tape Library Insufficient Session Expiration
IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 does not invalidate session after a logout which could allow an authenticated user to impersonate another user on the system.
Published: 2026-10-19 · CVSS: 5.5 · CVSS 3.1
IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 does not invalidate session after a logout which could allow an authenticated user to impersonate another user on the system.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7