CVE-2019-4072: IBM Tivoli Storage Productivity Center (IBM Spectrum Control Standard Edition 5.2.1 through 5.2.17) allows...

Security readout for executives and security teams

This flaw can leave an IBM Spectrum Control web session briefly usable after logout, exposing application information to someone with access to the same session context. It is not a broad remote takeover issue, but it can matter for storage administration consoles and shared or unattended administrator workstations. Exposure is limited to organizations running the affected IBM Spectrum Control Standard Edition 5.2.x versions. Risk is higher where the console is reachable from broad internal networks, used on shared systems, or accessed from unattended administrator browsers. Treat as a moderate-priority remediation for environments using affected IBM storage management software. Prioritize systems managing sensitive storage infrastructure or accessed from shared administrative workstations, but do not treat it as confirmed actively exploited from the provided evidence. Mitigation focus: Inventory IBM Spectrum Control Standard Edition deployments and versions.; Check IBM advisory 10873036 for fixed levels or vendor guidance.; Apply IBM-recommended updates or configuration changes where applicable..

Prepared

Jun 1, 2026, 12:53 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.