Description
IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 could allow a remote authenticated attacker to perform unauthorized account takeover due to improper authorization.
Published: 2026-11-08
Score: 8.1 High
EPSS: n/a
KEV: No
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

Vendor Solution

For the 1.12.0 release, upgrade to firmware version 1.12.0.4 Fix Pack or later, available from IBM Fix Central http://www-933.ibm.com/support/fixcentral/ http://www-933.ibm.com/support/fixcentral/ .  All future releases will include the fix for this vulnerability.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Sun, 08 Nov 2026 18:30:00 +0000

Type Values Removed Values Added
Description IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 could allow a remote authenticated attacker to perform unauthorized account takeover due to improper authorization.
Title TS4500 Tape Library addresses security vulnerability
First Time appeared Ibm
Ibm storage Ts4500 Library
Weaknesses CWE-285
CPEs cpe:2.3:a:ibm:storage_ts4500_library:1.1.1.6:*:*:*:*:*:*:*
cpe:2.3:a:ibm:storage_ts4500_library:1.12.0.3:*:*:*:*:*:*:*
Vendors & Products Ibm
Ibm storage Ts4500 Library
References
Metrics cvssV3_1

{'score': 8.1, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N'}

Subscriptions

Ibm Storage Ts4500 Library
cve-icon MITRE

Status: PUBLISHED

Assigner: ibm

Published:

Updated: 2026-11-08T18:28:03.804Z

Reserved: 2026-08-06T16:10:45.609Z

Link: CVE-2026-19133

cve-icon Vulnrichment

No data.

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses