High · 7.8 CVE-2022-43867 EUVD-2022-46837GHSA-p988-8hhv-9wpv

IBM Spectrum Scale command execution

Published Dec 6, 2022 · Updated Apr 23, 2025 · Assigned by ibm

Vendor: IBM Product: Spectrum Scale

Description

IBM Spectrum Scale 5.1.0.1 through 5.1.4.1 could allow a local attacker to execute arbitrary commands in the container. IBM X-Force ID: 239437.

Affected products

Vendor	Product	Affected	Fixed
IBM	Spectrum Scale	5.1.0.1 – < 5.1.4.1	5.1.4.1

Advisories 1

WID-SEC-2022-2249 IBM Spectrum Scale: Schwachstelle ermöglicht Codeausführung BSI CERT-Bund (WID) · Dec 6, 2022

References

https://www.ibm.com/support/pages/node/6844771 vendor-advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/239437 vdb-entry