PT-2022-15414 · Ibm · Ibm Spectrum Scale Data Access Services

Published 2022-08-10 · Updated 2023-08-08 · CVE-2022-22411

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions IBM Spectrum Scale Data Access Services (DAS) version 5.1.3.1

Description The issue allows an authenticated user to insert code, potentially enabling the attacker to manipulate cluster resources due to excessive permissions.

Recommendations For IBM Spectrum Scale Data Access Services (DAS) version 5.1.3.1, consider restricting access to cluster resources to minimize the risk of exploitation until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

CVE-2022-22411

Affected Products

Ibm Spectrum Scale Data Access Services

References · 5

• https://osv.dev/vulnerability/CVE-2022-22411 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-22411 · Security Note
• https://ibm.com/support/pages/node/6610277 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/223016 · Vendor Advisory
• https://t.me/cibsecurity/47877 · Telegram Post