CVE-2025-36104 MEDIUM

CVE-2025-36104: IBM Storage Scale information disclosure

Vendor Ibm
Product Storage Scale
Weakness CWE-277
Published July 12, 2025
Last update August 18, 2025
View on NVD All CVEs

CVSS base score

6.5/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality High
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

What the vulnerability does

01Description

IBM Storage Scale 5.2.3.0 and 5.2.3.1 could allow an authenticated user to obtain sensitive information from files due to the insecure permissions inherited through the SMB protocol.

Key dates

02Disclosure timeline

July 12, 2025 CVE published
August 18, 2025 Record updated