Permissions, Privileges, and Access Controls in IBM Spectrum Scale - CVE-2022-41739

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU89701

Permissions, Privileges, and Access Controls in IBM Spectrum Scale - CVE-2022-41739

Published: May 21, 2024


Vulnerability identifier: #VU89701
CSH Severity: Low
CVSS v4: 6.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2022-41739
CWE-ID: CWE-264
Exploitation vector: Local access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to IBM Spectrum Scale could allow programs running inside the container to overcome isolation mechanism. A local user can trigger the vulnerability  to gain additional capabilities or access sensitive information on the host.


Affected software

IBM Spectrum Scale
Spectrum Scale Container Native Storage Access

How to mitigate CVE-2022-41739

Install updates from vendor's website.

IBM Spectrum Scale - update to 5.1.7.0
Spectrum Scale Container Native Storage Access - update to 5.1.7.0

External References

Related Security Bulletins