CVE-2024-43192
Unknown
Unknown - Not Provided
BaseFortify
Publication date: 2025-09-27
Last updated on: 2025-12-11
Assigner: IBM Corporation
Description
Description
IBM Storage TS4500 Library 1.11.0.0 and 2.11.0.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| ibm | storage_ts4500_library_firmware | 1.11.0.0 |
| ibm | storage_ts4500_library_firmware | 2.11.0.0 |
| ibm | storage_ts4500_library | * |
| ibm | diamondback_tape_library_firmware | 1.11.0.0 |
| ibm | diamondback_tape_library_firmware | 2.11.0.0 |
| ibm | diamondback_tape_library | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-352 | The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor. |