CVE-2022-40607mediumCWE-22

CVE-2022-40607: medium-severity vulnerability in IBM Spectrum Scale

IBM Spectrum Scale directory traversal

Published · Updated

Follow this CVE+ Monitor Spectrum Scale

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.8epss 1.0%
IBM Spectrum Scale 5.1 could allow users with permissions to create pod, persistent volume and persistent volume claim to access files and directories outside of the volume, including on the host filesystem. IBM X-Force ID: 235740.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
Affected products
IBM · Spectrum Scale
Related CVEs — IBM Spectrum Scale

In the same product, most dangerous first.

CVE-2019-4715HIGHCVE-2019-4715EPSS 4.0%CVE-2020-4217HIGHCVE-2020-4217EPSS 1.3%CVE-2020-4412MEDIUMCVE-2020-4412EPSS 1.3%CVE-2021-29667HIGHCVE-2021-29667EPSS 1.2%CVE-2019-4558HIGHCVE-2019-4558EPSS 1.2%CVE-2020-4749MEDIUMCVE-2020-4749EPSS 1.0%