CVE-2026-19133 PUBLISHED

TS4500 Tape Library addresses security vulnerability

Assigner: ibm
Reserved: 06.08.2026 Published: 08.11.2026 Updated: 08.11.2026

IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 could allow a remote authenticated attacker to perform unauthorized account takeover due to improper authorization.

Metrics

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
CVSS Score: 8.1

Product Status

Vendor IBM
Product Storage TS4500 Library
Versions
  • affected from 1.1.1.6 to 1.12.0.3 (incl.)

Solutions

For the 1.12.0 release, upgrade to firmware version 1.12.0.4 Fix Pack or later, available from IBM Fix Central http://www-933.ibm.com/support/fixcentral/ http://www-933.ibm.com/support/fixcentral/ . 

All future releases will include the fix for this vulnerability.

References

Problem Types

  • CWE-285 Improper Authorization CWE