CVE-2025-1351

CWE-362 — Race Condition3 documents3 sources
Severity
7.0HIGH
EPSS
0.0%
top 98.56%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Storage Virtualize
Timeline
PublishedJul 7

Description

IBM Storage Virtualize 8.5, 8.6, and 8.7 products could allow a user to escalate their privileges to that of another user logging in at the same time due to a race condition in the login function.

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:HExploitability: 0.8 | Impact: 5.9

Affected Packages2 packages

▶CVEListV5ibm/storage_virtualize8.5, 8.6, 8.7+2
▶NVDibm/storage_virtualize8.5, 8.6, 8.7+2

🔴Vulnerability Details

2
CVEList
IBM Storage Virtualize privilege escalation↗2025-07-07
▶
GHSA
GHSA-9x5c-xp25-xffw: IBM Storage Virtualize 8↗2025-07-07
▶
CVE-2025-1351 (HIGH CVSS 7) | IBM Storage Virtualize 8.5 | cvebase.io