PT-2024-24270 · Ibm · Ibm Storage Scale Gui

Published 2024-12-14 · Updated 2024-12-21 · CVE-2024-31891

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions IBM Storage Scale GUI versions 5.1.9.0 through 5.1.9.6 IBM Storage Scale GUI versions 5.2.0.0 through 5.2.1.1

Description A local privilege escalation issue exists, allowing a malicious actor with command line access to the scalemgmt user to elevate privileges and gain root access to the host operating system.

Recommendations For IBM Storage Scale GUI versions 5.1.9.0 through 5.1.9.6, consider disabling the scalemgmt user access until a patch is available. For IBM Storage Scale GUI versions 5.2.0.0 through 5.2.1.1, consider disabling the scalemgmt user access until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-250

Related Identifiers

CVE-2024-31891

Affected Products

Ibm Storage Scale Gui

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2024-31891 · Security Note
• https://ibm.com/support/pages/node/7178098 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-31891 · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/1867930958197932194 · Twitter Post
• https://twitter.com/vuldb/status/1867931312872652981 · Twitter Post
• https://t.me/latest_high_impact_cve/1656 · Telegram Post
• https://t.me/cvenotify/104315 · Telegram Post
• https://twitter.com/cracbot/status/1869623758396551644 · Twitter Post
• https://t.me/cvedetector/12946 · Telegram Post
• https://twitter.com/defhawk_specter/status/1870318364754686029 · Twitter Post