TLS Certificate Validation Flaw in IBM Storage Scale Affects Remote Cluster GUI Interfaces
CVE-2026-14375

5.9MEDIUM

Key Information:

Vendor

IBM
Status
Storage Scale
Vendor
CVE Published:
8 November 2026

What is CVE-2026-14375?

IBM Storage Scale versions 5.2.3.0 through 5.2.3.8 and 6.0.1.0 are affected by a flaw that fails to properly validate TLS certificates in communications with remote cluster graphical user interfaces. This vulnerability could enable attackers to exploit it through man-in-the-middle techniques, potentially allowing the injection of forged JSON responses. This poses a risk of unauthorized access and manipulation of data within the system, highlighting the importance of implementing stringent security measures to validate certificate authenticity.

Affected Version(s)

Storage Scale 6.0.1.0

Storage Scale 5.2.3.0 <= 5.2.3.8

References

https://www.ibm.com/support/pages/node/7291325
vendor-advisorypatch

CVSS V3.1

Score:
5.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.