VYPR
← All advisories
Unrated severityNVD Advisory· Published Dec 14, 2024· Updated Dec 16, 2024

IBM Storage Scale SQL injection

CVE-2024-31892

Description

IBM Storage Scale GUI 5.1.9.0 through 5.1.9.6 and 5.2.0.0 through 5.2.1.1 could allow a user to perform unauthorized actions after intercepting and modifying a csv file due to improper neutralization of formula elements.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • IBM/Storage Scalecpe-rescue2 versions
    cpe:2.3:a:ibm:spectrum_scale_container_native_storage_access:5.1.9.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:ibm:spectrum_scale_container_native_storage_access:5.1.9.0:*:*:*:*:*:*:*range: 5.1.9.0
    • (no CPE)range: 5.1.9.0 - 5.1.9.6, 5.2.0.0 - 5.2.1.1

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.