CVE-2022-40607

MEDIUM

IBM Spectrum Scale < 5.1.4.0 - Path Traversal via Pod and Persistent Volume Claim

Title source: llm

Description

IBM Spectrum Scale 5.1 could allow users with permissions to create pod, persistent volume and persistent volume claim to access files and directories outside of the volume, including on the host filesystem. IBM X-Force ID: 235740.

References (2)

Core 2

Core References

Vendor Advisory vendor-advisory

https://www.ibm.com/support/pages/node/6848231

VDB Entry, Vendor Advisory vdb-entry

https://exchange.xforce.ibmcloud.com/vulnerabilities/235740

Scores

CVSS v3 6.8

EPSS 0.0028

EPSS Percentile 51.1%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-22

Status published

Products (1)

ibm/spectrum_scale < 5.1.4.0

Published Dec 19, 2022

Tracked Since Feb 18, 2026