IBM Spectrum Scale Container Native Storage Access vulnerabilities

6 CVEs affecting IBM Spectrum Scale Container Native Storage Access, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-41738, published 2024-02-17.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-41738, published 2024-02-17. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. IBM Storage Scale Container Native Storage Access 5.1.2.1 -through 5.1.7.0 could allow an attacker to initiate connections to containers from external networks. IBM X-Force ID: 237812.
CVE-2022-43867, published 2022-12-06. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. IBM Spectrum Scale 5.1.0.1 through 5.1.4.1 could allow a local attacker to execute arbitrary commands in the container. IBM X-Force ID: 239437.
CVE-2022-41739, published 2023-04-26. High severity, CVSS 8.4. EPSS: 0.2% chance of exploitation in the next 30 days. IBM Spectrum Scale (IBM Spectrum Scale Container Native Storage Access 5.1.2.1 through 5.1.6.0) could allow programs running inside the container to overcome isolation mechanism and gain additional…
CVE-2022-41736, published 2023-04-29. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. IBM Spectrum Scale Container Native Storage Access 5.1.2.1 through 5.1.6.0 contains an unspecified vulnerability that could allow a local user to obtain root privileges. IBM X-Force ID: 237810.
CVE-2022-43831, published 2023-07-31. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. IBM Storage Scale Container Native Storage Access 5.1.2.1 through 5.1.6.1 could allow a local user to obtain escalated privileges on a host without proper security context settings configured. IBM…
CVE-2022-41737, published 2024-02-17. Medium severity, CVSS 6.5. EPSS: 0.1% chance of exploitation in the next 30 days. IBM Storage Scale Container Native Storage Access 5.1.2.1 through 5.1.7.0 could allow a local attacker to initiate connections from a container outside the current namespace. IBM X-Force ID: 237811.