Skip to content
OpenAdvisories
High · 7.8 CVE-2024-31891 EUVD-2024-29749GHSA-vg55-7pcg-mj4h

IBM Storage Scale privilege escalation

Published Dec 14, 2024 · Updated Dec 16, 2024 · Assigned by ibm

Description

IBM Storage Scale GUI 5.1.9.0 through 5.1.9.6 and 5.2.0.0 through 5.2.1.1

contains a local privilege escalation vulnerability. A malicious actor with command line access to the 'scalemgmt' user can elevate privileges to gain root access to the host operating system.

Affected products

VendorProductAffectedFixed
IBM Storage Scale 5.1.9.0 – ≤ 5.1.9.6, 5.2.0.0 – ≤ 5.2.1.1 —

Advisories 1

References