Vulnerability · Published Apr 26, 2023 · Assigned by ibm
CVE-2022-41739IBM Spectrum Scale privilege escalation
High 7.9
In plain English
A high-severity security flaw in Spectrum Scale Container Native Storage Access from IBM. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 10% of all known vulnerabilities).
Severity (CVSS 3.1)7.9High
Exploit odds (30 days)0.2%top 90.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
IBM Spectrum Scale (IBM Spectrum Scale Container Native Storage Access 5.1.2.1 through 5.1.6.0) could allow programs running inside the container to overcome isolation mechanism and gain additional capabilities or access sensitive information on the host. IBM X-Force ID: 237815.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| IBM | Spectrum Scale Container Native Storage Access | 5.1.2.1 – before 5.1.6.0 |