CVE-2025-36104CWE-277

IBM Storage Scale information disclosure

Medium · published July 12, 2025

CVSS v3.1
6.5
EPSS
0%
Percentile
22.6
In the wild
Unconfirmed
What it is

IBM Storage Scale 5.2.3.0 and 5.2.3.1 could allow an authenticated user to obtain sensitive information from files due to the insecure permissions inherited through the SMB protocol.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00310 · 22.6th percentile
Weakness
CWE-277 · Insecure Inherited Permissions
Published
2025-07-12T11:30Z
EPSS history
Timeline
  • 12 JUL 11:30Z
    IBM Storage Scale information disclosure
    cvelistv5