Description
IBM Spectrum Scale 5.1 could allow users with permissions to create pod, persistent volume and persistent volume claim to access files and directories outside of the volume, including on the host filesystem. IBM X-Force ID: 235740.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| IBM | Spectrum Scale | 5.1 | — |
Advisories 1
- WID-SEC-2022-2369 IBM Spectrum Scale: Schwachstelle ermöglicht Offenlegung von Informationen BSI CERT-Bund (WID) · Dec 19, 2022
References
- https://www.ibm.com/support/pages/node/6848231 vendor-advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/235740 vdb-entry