CVE-2022-22411

Опубликовано: 10 авг. 2022

Источник: nvd

CVSS3: 6.3

CVSS3: 6.5

EPSS Низкий

Описание

IBM Spectrum Scale Data Access Services (DAS) 5.1.3.1 could allow an authenticated user to insert code which could allow the attacker to manipulate cluster resources due to excessive permissions. IBM X-Force ID: 223016.

Ссылки

https://exchange.xforce.ibmcloud.com/vulnerabilities/223016
VDB Entry
Vendor Advisory
https://www.ibm.com/support/pages/node/6610277
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/223016
VDB Entry
Vendor Advisory
https://www.ibm.com/support/pages/node/6610277
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:ibm:spectrum_scale_data_access_services:5.1.3.1:*:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*

EPSS

Процентиль: 27%

0.00094

Низкий

6.3 Medium

CVSS3

6.5 Medium

CVSS3

Дефекты

CWE-732

Связанные уязвимости

GHSA-hqh2-45gr-jc64

CVSS3: 6.5

github

больше 3 лет назад

EPSS

Процентиль: 27%

0.00094

Низкий

6.3 Medium

CVSS3

6.5 Medium

CVSS3

Дефекты

CWE-732