IBM Spectrum Scale directory traversal
CVE-2022-40607

6.8MEDIUM

Key Information:

Vendor
IBM
Status
Spectrum Scale
Vendor
CVE Published:
19 December 2022

Summary

IBM Spectrum Scale 5.1 could allow users with permissions to create pod, persistent volume and persistent volume claim to access files and directories outside of the volume, including on the host filesystem. IBM X-Force ID: 235740.

Affected Version(s)

Spectrum Scale 5.1

References

https://www.ibm.com/support/pages/node/6848231
vendor-advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/235740
vdb-entry

CVSS V3.1

Score:
6.8
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.