{"id":"CVE-2026-19483","state":"PUBLISHED","title":"The following vulnerabilities that can affect IBM Storage Scale and the Management GUI are now fixed in 5.2.3.9 or higher and 6.0.1.1 or higher","description":"IBM Storage Scale 5.2.3.0 through 5.2.3.8, and 6.0.0.0 through 6.0.1.0 Secrets may be disclosed in log files in IBM Storage Scale Management GUI The admin password is logged into the GUI log of IBM Storage Scale Systems Deploy and Upgrade from GUI. Secrets may be disclosed in information related to exceptions in IBM Storage Scale Management GUI.","publishedAt":"2026-08-13T20:47:01.247Z","updatedAt":"2026-08-15T03:55:37.477Z","severity":{"score":7.1,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","source":"ibm"},"assigner":"ibm","products":["IBM Storage Scale"],"affected":[{"vendor":"IBM","product":"Storage Scale","versions":[{"version":"5.2.3.0","status":"affected","lessThanOrEqual":"5.2.3.8","versionType":"semver"},{"version":"6.0.0.0","status":"affected","lessThanOrEqual":"6.0.1.0","versionType":"semver"}],"cpes":["cpe:2.3:a:ibm:storage_scale:5.2.3.0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:storage_scale:5.2.3.8:*:*:*:*:*:*:*","cpe:2.3:a:ibm:storage_scale:6.0.0.0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:storage_scale:6.0.1.0:*:*:*:*:*:*:*"]}],"references":["https://www.ibm.com/support/pages/node/7283308"],"weaknesses":["CWE-532"],"ingestedAt":"2026-10-29T20:11:10.572Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/19xxx/CVE-2026-19483.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-19483","state":"PUBLISHED","datePublished":"2026-08-13T20:47:01.247Z","dateUpdated":"2026-08-15T03:55:37.477Z","assignerShortName":"ibm","assignerOrgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","dateReserved":"2026-08-10T16:00:42.826Z"},"containers":{"cna":{"title":"The following vulnerabilities that can affect IBM Storage Scale and the Management GUI are now fixed in 5.2.3.9 or higher and 6.0.1.1 or higher","descriptions":[{"lang":"en","value":"IBM Storage Scale 5.2.3.0 through 5.2.3.8, and 6.0.0.0 through 6.0.1.0 Secrets may be disclosed in log files in IBM Storage Scale Management GUI The admin password is logged into the GUI log of IBM Storage Scale Systems Deploy and Upgrade from GUI. Secrets may be disclosed in information related to exceptions in IBM Storage Scale Management GUI."}],"affected":[{"vendor":"IBM","product":"Storage Scale","versions":[{"version":"5.2.3.0","status":"affected","lessThanOrEqual":"5.2.3.8","versionType":"semver"},{"version":"6.0.0.0","status":"affected","lessThanOrEqual":"6.0.1.0","versionType":"semver"}],"cpes":["cpe:2.3:a:ibm:storage_scale:5.2.3.0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:storage_scale:5.2.3.8:*:*:*:*:*:*:*","cpe:2.3:a:ibm:storage_scale:6.0.0.0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:storage_scale:6.0.1.0:*:*:*:*:*:*:*"]}],"references":[{"url":"https://www.ibm.com/support/pages/node/7283308","tags":["vendor-advisory","patch"]}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE","baseSeverity":"HIGH","baseScore":7.1,"vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-532","lang":"en","description":"CWE-532 Insertion of Sensitive Information into Log File","type":"CWE"}]}],"providerMetadata":{"shortName":"ibm","orgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","dateUpdated":"2026-08-13T20:47:01.247Z"},"solutions":[{"lang":"en","value":"For IBM Storage Scale 5.2.3.x, IBM strongly recommends addressing the vulnerability by upgrading to 5.2.3.9 or later:\n\n\n\n https://www.ibm.com/support/fixcentral/swg/selectFixes?parent=Software%20defined%20storage&product=ibm/StorageSoftware/IBM+Storage+Scale&release=5.2.3&platform=All&function=all \n\n\n\n\n\n\n\nFor IBM Storage Scale 6.0.0.x, IBM strongly recommends addressing the vulnerability by upgrading to 6.0.1.1 or later:\n\n\n\n https://www.ibm.com/support/fixcentral/swg/selectFixes?parent=Software%20defined%20storage&product=ibm/StorageSoftware/IBM+Storage+Scale&release=6.0.1&platform=All&function=all","supportingMedia":[{"type":"text/html","base64":false,"value":"

For IBM Storage Scale 5.2.3.x, IBM strongly recommends addressing the vulnerability by upgrading to 5.2.3.9 or later:

https://www.ibm.com/support/fixcentral/swg/selectFixes?parent=Software%20defined%20storage&product=ibm/StorageSoftware/IBM+Storage+Scale&release=5.2.3&platform=All&function=all

For IBM Storage Scale 6.0.0.x, IBM strongly recommends addressing the vulnerability by upgrading to 6.0.1.1 or later:

https://www.ibm.com/support/fixcentral/swg/selectFixes?parent=Software%20defined%20storage&product=ibm/StorageSoftware/IBM+Storage+Scale&release=6.0.1&platform=All&function=all

"}]}]},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-08-14T00:00:00+00:00","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3","id":"CVE-2026-19483"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-08-15T03:55:37.477Z"}}]}}}