IBM System Storage DS8000 could allow an attacker to bypass security authentication due to improperly encoding of DSCLI command output to obtain sensitive information or cause a denial of service.

IBM System Storage DS8000 could allow an authenticated user to read or modify another user's command history due to an externally controlled filename.

IBM System Storage DS8000 could allow an authenticated user to create a user with privileged user roles due to improper privileged defined with unsafe actions.