PT-2025-53585 · Ibm · Ibm Ds8900F+4

Published 2025-12-26 · Updated 2025-12-26 · CVE-2025-36192

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions IBM DS8A00 versions 10.10.106.0 IBM DS8A00 versions 10.1.3.010.2.45.0 IBM DS8900F versions 89.40.83.089.42.18.089.44.5.0

Description IBM System Storage DS8000 may allow a local user with authorized CCW update permissions to delete or corrupt backups. This is due to missing authorization in IBM Safeguarded Copy / GDPS Logical corruption protection mechanisms.

Recommendations IBM DS8A00 version 10.10.106.0: At the moment, there is no information about a newer version that contains a fix for this vulnerability. IBM DS8A00 version 10.1.3.010.2.45.0: At the moment, there is no information about a newer version that contains a fix for this vulnerability. IBM DS8900F version 89.40.83.089.42.18.089.44.5.0: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2025-36192

Affected Products

Gdps

Ibm Ds8900F

Ibm Ds8A00

Ibm Safeguarded Copy

Ibm System Storage Ds8000

References · 6

• https://osv.dev/vulnerability/CVE-2025-36192 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-36192 · Security Note
• https://t.me/cveNotify/146873 · Telegram Post
• https://t.me/CVEtracker/40709 · Telegram Post
• https://twitter.com/CVEnew/status/2004666601677680707 · Twitter Post
• https://ibm.com/support/pages/node/7255039 · Patch, Vendor Advisory