CVE-2026-19483
HighCVSS 7.1Exploitation Probability (EPSS)
Low risk1th percentile - higher than 1% of all known CVEs
Summary
IBM Storage Scale 5.2.3.0 through 5.2.3.8, and 6.0.0.0 through 6.0.1.0 Secrets may be disclosed in log files in IBM Storage Scale Management GUI The admin password is logged into the GUI log of IBM Storage Scale Systems Deploy and Upgrade from GUI. Secrets may be disclosed in information related to exceptions in IBM Storage Scale Management GUI.
Risk Assessment
The risk is the exposure of sensitive credentials, potentially leading to unauthorized access to the system and security breaches.
Recommendation
Restrict access to log files and apply patches provided by IBM if available.
Other vulnerabilities in IBM Storage Scale
See all- CVE-2026-76052Medium
IBM Storage Scale System and IBM Storage Scale in the listed versions allow an attacker to leverage an undocumented flag to gain access to an unauthenticated path in the REST API.
- CVE-2026-14469Medium
IBM Storage Scale 5.2.3.0 through 5.2.3.9 and 6.0.1.0 could allow an authenticated attacker to access and manipulate filesets beyond their control due to improper authorization.
- CVE-2026-14437Medium
IBM Storage Scale 5.2.3.0 through 5.2.3.9 and 6.0.1.0 could allow a remote attacker to traverse directories on the system by sending a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files.
- CVE-2026-14375Medium
IBM Storage Scale 5.2.3.0 through 5.2.3.8, and 6.0.1.0 does not validate or improperly validates TLS certificate validation when communicating with remote cluster GUI interfaces, which could allow an attacker to inject forged JSON responses using man in the middle techniques.
- CVE-2026-13460High
IBM Storage Scale versions 5.2.3.0 through 5.2.3.8 and 6.0.0.0 through 6.0.1.0 contain a hardcoded token in the GUI source code, used for inter-node cluster communication and REST API authentication between GUIs.
Original NVD description (English source)
IBM Storage Scale 5.2.3.0 through 5.2.3.8, and 6.0.0.0 through 6.0.1.0 Secrets may be disclosed in log files in IBM Storage Scale Management GUI The admin password is logged into the GUI log of IBM Storage Scale Systems Deploy and Upgrade from GUI. Secrets may be disclosed in information related to exceptions in IBM Storage Scale Management GUI.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS