IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 could allow a remote authenticated attacker to perform unauthorized account takeover due to improper authorization.
Advisories
No advisories yet.
Fixes
Solution
For the 1.12.0 release, upgrade to firmware version 1.12.0.4 Fix Pack or later, available from IBM Fix Central http://www-933.ibm.com/support/fixcentral/ http://www-933.ibm.com/support/fixcentral/ . All future releases will include the fix for this vulnerability.
Workaround
No workaround given by the vendor.
References
| Link | Providers |
|---|---|
| https://www.ibm.com/support/pages/node/7292609 |
|
History
Sun, 08 Nov 2026 18:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 could allow a remote authenticated attacker to perform unauthorized account takeover due to improper authorization. | |
| Title | TS4500 Tape Library addresses security vulnerability | |
| First Time appeared |
Ibm
Ibm storage Ts4500 Library |
|
| Weaknesses | CWE-285 | |
| CPEs | cpe:2.3:a:ibm:storage_ts4500_library:1.1.1.6:*:*:*:*:*:*:* cpe:2.3:a:ibm:storage_ts4500_library:1.12.0.3:*:*:*:*:*:*:* |
|
| Vendors & Products |
Ibm
Ibm storage Ts4500 Library |
|
| References |
| |
| Metrics |
cvssV3_1
|
Projects
Sign in to view the affected projects.
Status: PUBLISHED
Assigner: ibm
Published:
Updated: 2026-11-08T18:28:03.804Z
Reserved: 2026-08-06T16:10:45.609Z
Link: CVE-2026-19133
No data.
No data.
No data.
OpenCVE Enrichment
No data.
Weaknesses