Local Privilege Escalation in IBM Spectrum Scale by IBM
CVE-2021-29708

6.7MEDIUM

Key Information:

Vendor

IBM
Status
Spectrum Scale
Vendor
CVE Published:
25 May 2021

What is CVE-2021-29708?

IBM Spectrum Scale version 5.1.0.1 contains a vulnerability that allows a local user with access to the GUI pod container to extract sensitive cryptographic keys. This exposure could lead to unauthorized privilege escalation, leveraging those keys to gain elevated access and control over the system.

Affected Version(s)

Spectrum Scale 5.1.0.1

References

https://www.ibm.com/support/pages/node/6455629
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/200883
vdb-entryx_refsource_XF

CVSS V3.1

Score:
6.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.