CSV Injection Vulnerability in IBM Spectrum Scale Products

CVE-2021-29667

What is CVE-2021-29667?

IBM Spectrum Scale versions 5.0.0 to 5.0.5.6 and 5.1.0 to 5.1.0.2 are susceptible to CSV injection vulnerabilities. This issue arises from inadequate validation of contents within CSV files, enabling a remote attacker to execute arbitrary commands on the affected system. Organizations using these versions of IBM Spectrum Scale should review their security protocols and ensure necessary updates are applied to mitigate this risk. For further details, refer to the IBM X-Force advisory.

References