IBM Spectrum Scale privilege escalation (IBM Spectrum Scale Container Native Storage Access)
En bref
- Source
- NVD
- EPSS
- EPSS 0.20 % · centile 10 ()
- État
- PUBLISHED
- Publiée
- Mise à jour
- Attribuée par
- ibm
- Statut NVD
- Modified
Rechercher sur…
Description
IBM Spectrum Scale (IBM Spectrum Scale Container Native Storage Access 5.1.2.1 through 5.1.6.0) could allow programs running inside the container to overcome isolation mechanism and gain additional capabilities or access sensitive information on the host. IBM X-Force ID: 237815.
Références
Scores
| Version | Score | Vecteur | Évalué par |
|---|---|---|---|
| CVSS 3.1 | HIGH 7.9 | CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:N | ibm |
| CVSS 3.1 | HIGH 7.9 | CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:N | NVD · psirt@us.ibm.com (Secondary) |
| CVSS 3.1 | HIGH 8.4 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N | NVD · nvd@nist.gov (Primary) |
Références européennes
- ENISA EUVD · EUVD-2022-44910
- GCVE · GCVE-0-2022-41739
Avis du CERT-FR
- CERTFR-2023-AVI-0314 — Multiples vulnérabilités dans IBM Spectrum Scale · cert.ssi.gouv.fr
Configurations affectées (CPE NVD)
cpe:2.3:a:ibm:spectrum_scale_container_native_storage_access:*:*:*:*:*:*:*:*≥ 5.1.2.1 ≤ 5.1.6.0
Produits affectés
| Produit | Versions |
|---|---|
| IBM · Spectrum Scale Container Native Storage Access | affected 5.1.2.1 < 5.1.6.0 |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |