IBM T4500 Info Disclosure CVE-2025-30651 Security Bulletin

Vulnerability Overview Security Bulletin Title: Security Bulletin: T4500 Tape Library addresses security vulnerability CVE-2025-30651 Summary: This bulletin addresses users with administrative privileges regarding a potential security vulnerability that could lead to the exposure of email addresses. This vulnerability may allow an attacker to obtain user email addresses by sending crafted HTTP requests to the affected system. IBM has released an update to resolve this issue. Vulnerability Details: CVE ID: CVE-2025-30651 Description: Affected T4500 Tape Library and Storage systems (Storage T4500) allow unauthenticated users to obtain user email addresses via crafted HTTP requests. CVSS Score: 3.8 CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVSS Version: 3.1 Scope of Impact Affected Products and Versions: Remediation Fixes/Mitigations: For version 1.1.0, upgrade to version 1.1.0.8 to resolve this vulnerability. All user information is included in this security bulletin. Workarounds and Mitigations: None Notification of Future Security Bulletins: Subscribe to IBM Security Bulletins to receive updates on the latest product support documentation. Related CVE ID Links: Click here to view detailed information for CVE-2025-30651. Related Documentation: IBM Security Bulletin Web Portal IBM Product Security Response Blog Change History: January 20, 2025: Initial release - This bulletin contains product-specific information and links to the IBM Security Bulletin describing the CVE to assess the impact of the vulnerability. Disclaimer: IBM software and services are provided "as is" without any express or implied warranties, pursuant to the terms of the IBM Software License and Master Agreement (LAMP) or the IBM Software License and Master Agreement (SLA). IBM does not guarantee that software or services will be free of vulnerabilities. Users should evaluate the suitability of software and services themselves. IBM reserves the right to modify or terminate software and services at any time without prior notice. Note: This security bulletin applies only to IBM products and does not apply to third-party products or services. IBM does not guarantee that software or services will be free of vulnerabilities and is not liable for any losses arising from the use of software or services. Users should regularly update software and services to obtain the latest security patches and fixes. If users discover any security vulnerabilities, they should report them to IBM immediately. Contact Information: IBM Product Security Response Team: product-security@ibm.com Additional Information: The publication date of this security bulletin is January 20, 2025. The revision date of this security bulletin is January 20, 2025. The revision date of this security bulletin is January 20, 2025. Summary: This security bulletin addresses the security vulnerability CVE-2025-30651 in the IBM T4500 Tape Library and Storage systems (Storage T4500). The vulnerability allows unauthenticated users to obtain user email addresses via crafted HTTP requests. IBM has released an update to resolve this issue; users are advised to upgrade to version 1.1.0.8. Users should regularly update software and services to obtain the latest security patches and fixes. If users discover any security vulnerabilities, they should report them to IBM immediately.

Goal Reached Thanks to every supporter — we hit 100%!

IBM T4500 Info Disclosure CVE-2025-30651 Security Bulletin

More from this source