CVE-2025-36398 IBM CVE debrief

Who should care

IBM System Storage DS8A00 and DS8900F users and administrators should assess their exposure to this vulnerability. They should verify affected versions, review command history for anomalies, and apply vendor remediation. Security teams and vulnerability management teams should prioritize this issue and coordinate with system administrators for remediation.

Why it matters

IBM System Storage DS8A00 and DS8900F users should assess exposure to an externally controlled filename vulnerability. Defenders should verify affected versions, check command history for anomalies, and apply vendor remediation.

• Read or modify command history
• Potential unauthorized access to sensitive information
• Possible disruption of system operations

Technical summary

IBM System Storage DS8A00 10.1.3.0 through 10.11.35.0 and IBM DS8900F 89.40.83.0 through 89.44.25.0 are vulnerable to an externally controlled filename issue. An authenticated user could read or modify another user's command history. The vulnerability exists due to improper handling of filenames, allowing an attacker to manipulate command history. Defenders should focus on verifying affected versions and applying vendor remediation.

Defensive priority

Medium priority for IBM System Storage DS8A00 and DS8900F users

Recommended defensive actions

• Verify affected versions of IBM System Storage DS8A00 and DS8900F
• Check command history for anomalies
• Apply vendor remediation

Evidence notes

The CVE record and NVD entry provide details on the externally controlled filename vulnerability in IBM System Storage DS8A00 and DS8900F. Vendor advisory is available.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.