Description
IBM Storage Scale 5.2.3.0 through 5.2.3.9 and 6.0.1.0 could allow an authenticated attacker to access and manipulate filesets beyond their control due to improper authorization.
Published: 2026-11-08
Score: 5.4 Medium
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

Vendor Solution

For IBM Storage Scale Container Native (CSI is bundled with it) * 5.2.3.x: https://www.ibm.com/docs/en/scalecontainernative/5.2.3 * 6.0.1.x:  https://www.ibm.com/docs/en/scalecontainernative/6.0.1 CSI standalone: * 2.14.x: https://www.ibm.com/docs/en/scalecsi/2.14.x * 3.1.x: https://www.ibm.com/docs/en/scalecsi/3.1.x

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Sun, 08 Nov 2026 17:30:00 +0000

Type Values Removed Values Added
Description IBM Storage Scale 5.2.3.0 through 5.2.3.9 and 6.0.1.0 could allow an authenticated attacker to access and manipulate filesets beyond their control due to improper authorization.
Title IBM Storage Scale Incorrect Authorization
First Time appeared Ibm
Ibm storage Scale
Weaknesses CWE-863
CPEs cpe:2.3:a:ibm:storage_scale:5.2.3.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:storage_scale:5.2.3.9:*:*:*:*:*:*:*
cpe:2.3:a:ibm:storage_scale:6.0.1.0:*:*:*:*:*:*:*
Vendors & Products Ibm
Ibm storage Scale
References
Metrics cvssV3_1

{'score': 5.4, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N'}

Subscriptions

Ibm Storage Scale
cve-icon MITRE

Status: PUBLISHED

Assigner: ibm

Published:

Updated: 2026-11-08T17:26:41.436Z

Reserved: 2026-07-02T14:16:20.602Z

Link: CVE-2026-14469

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-11-08T18:17:02.157

Modified: 2026-11-08T18:17:02.267

Link: CVE-2026-14469

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-11-08T19:00:14Z

Weaknesses