CVE-2026-19178: TS4500 Tape Library Race Condition
IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 could allow a remote authenticated attacker to gain unauthorized administrative privileges due to a race condition.
Other sources
Storage TS4500 Library could allow a remote authenticated attacker to gain unauthorized administrative privileges due to a race condition.
— IBM
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM Storage TS4500 Libraryto a version that resolves this vulnerability.Fixed in 1.12.0.4
Event History
Frequently Asked Questions
Who can exploit this issue?
An attacker must be remote and authenticated to the affected TS4500 Library. The vulnerability requires low privileges, so any account with the necessary authenticated access may be relevant to triage.
What versions are affected?
IBM Storage TS4500 Library versions 1.1.1.6 through 1.12.0.3 are identified as affected.
What is the potential impact?
Successful exploitation could allow an authenticated remote attacker to obtain unauthorized administrative privileges. The provided vector indicates high confidentiality and integrity impact, with no availability impact indicated.
How difficult is exploitation?
Exploitation requires a race condition to be won, reflected by high attack complexity. No user interaction is required.