IBM Spectrum Scale privilege escalation (IBM Spectrum Scale Container Native Storage Access)
At a glance
- Source
- NVD
- EPSS
- EPSS 0.20 % · percentile 10 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- ibm
- NVD status
- Modified
Description
IBM Spectrum Scale (IBM Spectrum Scale Container Native Storage Access 5.1.2.1 through 5.1.6.0) could allow programs running inside the container to overcome isolation mechanism and gain additional capabilities or access sensitive information on the host. IBM X-Force ID: 237815.
References
Scores
| Version | Score | Vector | Scored by |
|---|---|---|---|
| CVSS 3.1 | HIGH 7.9 | CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:N | ibm |
| CVSS 3.1 | HIGH 7.9 | CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:N | NVD · psirt@us.ibm.com (Secondary) |
| CVSS 3.1 | HIGH 8.4 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N | NVD · nvd@nist.gov (Primary) |
European references
- ENISA EUVD · EUVD-2022-44910
- GCVE · GCVE-0-2022-41739
CERT-FR advisories
- CERTFR-2023-AVI-0314 — Multiples vulnérabilités dans IBM Spectrum Scale · cert.ssi.gouv.fr
Affected configurations (NVD CPE)
cpe:2.3:a:ibm:spectrum_scale_container_native_storage_access:*:*:*:*:*:*:*:*≥ 5.1.2.1 ≤ 5.1.6.0
Affected products
| Product | Versions |
|---|---|
| IBM · Spectrum Scale Container Native Storage Access | affected 5.1.2.1 < 5.1.6.0 |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |