NetSight
high7.8

CVE-2024-31891

IBM Storage Scale GUI 5.1.9.0 through 5.1.9.6 and 5.2.0.0 through 5.2.1.1 contains a local privilege escalation vulnerability.

Impact

IBM Storage Scale GUI 5.1.9.0 through 5.1.9.6 and 5.2.0.0 through 5.2.1.1 contains a local privilege escalation vulnerability. A malicious actor with command line access to the 'scalemgmt' user can elevate privileges to gain root access to the host operating system.

Affected products

VendorProductAffected versions
IbmStorage Scale
from 5.1.9.0 before 5.1.9.7
from 5.2.0.0 before 5.2.2.0

Weakness classification

References