CVE-2022-41736

CVE-2022-41736 affects IBM Spectrum Scale Container Native Storage Access, versions 5.1.2.1–5.1.6.0 . The IBM bulletin and related sources describe an unspecified vulnerability that could allow a local user to obtain root privileges on the host. A fix is available in version 5.1.7.0 (recommended ...

CVE-2022-43867

Summary: CVE-2022-43867 affects IBM Spectrum Scale Container Native Storage Access. The following versions are impacted: 5.1.0.1 through 5.1.4.1. The vulnerability could allow a local attacker to execute arbitrary commands inside the container. The IBM Security bulletin (and X-Force ID 239437) li...

CVE-2022-43831

IBM Storage Scale Container Native Storage Access versions 5.1.2.1–5.1.6.1 expose a local privilege escalation where a local user can gain escalated privileges on the host due to improper security context settings. Affected product is IBM Storage Scale Container Native Storage Access; root cause ...

CVE-2022-41739

IBM Spectrum Scale Container Native Storage Access versions 5.1.2.1–5.1.6.0 allow a program inside a container to bypass isolation and gain host access or capabilities, potentially exposing confidential information on the host. Remediation: upgrade to 5.1.7.0+ (and OpenShift 4.11+). If running

CVE-2022-41737

IBM Storage Scale Container Native Storage Access versions 5.1.2.1–5.1.7.0 allow a local attacker to initiate connections from a container outside the current namespace. The root cause is a namespace isolation weakness in CNSA that enables container-to-container access beyond the intended boundar...

CVE-2022-41738

IBM Storage Scale Container Native Storage Access vulnerability CVE-2022-41738 affects versions 5.1.2.1 through 5.1.7.0, enabling an attacker to initiate connections to containers from external networks. The issue is documented in the IBM Security Bulletin and related advisories (X-Force ID 23781...