{"id":"CVE-2022-41739","state":"PUBLISHED","title":"IBM Spectrum Scale privilege escalation","description":"\nIBM Spectrum Scale (IBM Spectrum Scale Container Native Storage Access 5.1.2.1 through 5.1.6.0) could allow programs running inside the container to overcome isolation mechanism and gain additional capabilities or access sensitive information on the host. IBM X-Force ID: 237815.\n\n","publishedAt":"2023-04-26T02:09:03.525Z","updatedAt":"2025-01-31T16:14:25.449Z","severity":{"score":7.9,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:N","source":"ibm"},"assigner":"ibm","products":["IBM Spectrum Scale Container Native Storage Access"],"affected":[{"vendor":"IBM","product":"Spectrum Scale Container Native Storage Access","defaultStatus":"unaffected","versions":[{"version":"5.1.2.1","status":"affected","lessThan":"5.1.6.0","versionType":"semver"}]}],"references":["https://www.ibm.com/support/pages/node/6964568","https://exchange.xforce.ibmcloud.com/vulnerabilities/237815"],"weaknesses":[],"ingestedAt":"2026-10-29T19:50:37.819Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2022/41xxx/CVE-2022-41739.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2022-41739","state":"PUBLISHED","datePublished":"2023-04-26T02:09:03.525Z","dateUpdated":"2025-01-31T16:14:25.449Z","assignerShortName":"ibm","assignerOrgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","dateReserved":"2022-09-28T17:18:53.377Z"},"containers":{"cna":{"title":"IBM Spectrum Scale privilege escalation","descriptions":[{"lang":"en","value":"\nIBM Spectrum Scale (IBM Spectrum Scale Container Native Storage Access 5.1.2.1 through 5.1.6.0) could allow programs running inside the container to overcome isolation mechanism and gain additional capabilities or access sensitive information on the host. IBM X-Force ID: 237815.\n\n"}],"affected":[{"vendor":"IBM","product":"Spectrum Scale Container Native Storage Access","defaultStatus":"unaffected","versions":[{"version":"5.1.2.1","status":"affected","lessThan":"5.1.6.0","versionType":"semver"}]}],"references":[{"url":"https://www.ibm.com/support/pages/node/6964568","tags":["vendor-advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/237815","tags":["vdb-entry"]}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"NONE","baseScore":7.9,"baseSeverity":"HIGH","confidentialityImpact":"LOW","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:N","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"description":"264 Permissions, Privileges, Access Controls","lang":"en"}]}],"providerMetadata":{"shortName":"ibm","orgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","dateUpdated":"2023-04-26T02:09:03.525Z"},"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.1.0-dev"}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://www.ibm.com/support/pages/node/6964568","tags":["vendor-advisory","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/237815","tags":["vdb-entry","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-03T12:49:43.927Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-01-31T16:14:10.699024Z","id":"CVE-2022-41739","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-01-31T16:14:25.449Z"}}]}}}