Description
IBM Transformation Advisor 2.0.1 through 4.3.1 incorrectly assigns privileges to security critical files which could allow a local root escalation inside a container running the IBM Transformation Advisor Operator Catalog image.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| IBM | Transformation Advisor | 2.0.1 – ≤ 4.3.1 | — |
References
- https://www.ibm.com/support/pages/node/7243632 vendor-advisory patch