title: IBM Spectrum Scale privilege escalation
description:
IBM Spectrum Scale (IBM Spectrum Scale Container Native Storage Access 5.1.2.1 through 5.1.6.0) could allow programs running inside the container to overcome isolation mechanism and gain additional capabilities or access sensitive information on the host. IBM X-Force ID: 237815.
problem types: 264 Permissions, Privileges, Access Controls
affected:
{
defaultStatus: unaffected
product: Spectrum Scale Container Native Storage Access
vendor: IBM
versions:
lessThan: 5.1.6.0, status: affected, version: 5.1.2.1, versionType: semver
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: NONE
baseScore: 7.9
baseSeverity: HIGH
confidentialityImpact: LOW
integrityImpact: HIGH
privilegesRequired: NONE
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:N
version: 3.1
]
format: CVSS
scenarios: GENERAL