VYPR
← All advisories
Unrated severityNVD Advisory· Published Dec 14, 2024· Updated Dec 16, 2024

IBM Storage Scale privilege escalation

CVE-2024-31891

Description

IBM Storage Scale GUI 5.1.9.0 through 5.1.9.6 and 5.2.0.0 through 5.2.1.1

contains a local privilege escalation vulnerability. A malicious actor with command line access to the 'scalemgmt' user can elevate privileges to gain root access to the host operating system.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • IBM/Storage Scalecpe-rescue2 versions
    cpe:2.3:a:ibm:spectrum_scale_container_native_storage_access:5.1.9.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:ibm:spectrum_scale_container_native_storage_access:5.1.9.0:*:*:*:*:*:*:*range: 5.1.9.0
    • (no CPE)range: >=5.1.9.0 <=5.1.9.6 || >=5.2.0.0 <=5.2.1.1

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.