Local File Audit Bypass Vulnerability in IBM Spectrum Scale
CVE-2021-29671
4MEDIUM
Summary
IBM Spectrum Scale version 5.1.0.1 is susceptible to a vulnerability that allows local attackers to circumvent the filesystem audit logging mechanism, which could lead to unauthorized access and manipulation of logged file activities, assuming the audit logging feature is activated. This could potentially facilitate malicious activities without being detected, emphasizing the importance of implementing robust security measures and regularly updating affected systems.
Affected Version(s)
Spectrum Scale 5.1.0.1
References
CVSS V3.1
Score:
4
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved