CVE-2025-36104: IBM Storage Scale

Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days.

IBM Storage Scale 5.2.3.0 and 5.2.3.1 could allow an authenticated user to obtain sensitive information from files due to the insecure permissions inherited through the SMB protocol.

Affected products

• IBM Storage Scale: version 5.2.3.0 only; version 5.2.3.1 only

Published 2025-07-12. Last modified 2026-06-17.