Skip to content
OpenAdvisories
Medium WID-SEC-2024-3701 2 CVEs

IBM Storage Scale: Mehrere Schwachstellen ermöglichen Privilegieneskalation

Published Dec 15, 2024 · Updated Dec 15, 2024 · de-DE

Vendor: IBM Product: Storage Scale Platform: Linux

Summary

Ein Angreifer kann mehrere Schwachstellen in IBM Storage Scale ausnutzen, um seine Privilegien zu erhöhen oder Daten zu manipulieren.

Product

IBM Storage Scale ist eine Lösung für das Management großer unstrukturierter Datenmengen.

Vulnerabilities 2

  • High 7.8
    CVE-2024-31891

    IBM Storage Scale privilege escalation

    IBM Storage Scale GUI 5.1.9.0 through 5.1.9.6 and 5.2.0.0 through 5.2.1.1 contains a local privilege escalation vulnerability. A malicious actor with command line access to the 'scalemgmt' user can elevate privileges to gain root access to the host operating …

    IBM Storage Scale
  • High 7.5
    CVE-2024-31892

    IBM Storage Scale SQL injection

    IBM Storage Scale GUI 5.1.9.0 through 5.1.9.6 and 5.2.0.0 through 5.2.1.1 could allow a user to perform unauthorized actions after intercepting and modifying a csv file due to improper neutralization of formula elements.

    IBM Storage Scale

Revision history

  1. #1

    Initiale Fassung

References