CVE-2022-43869

MEDIUM

IBM Spectrum Scale & Elastic Storage System <5.1.2.8, <6.1.4.1 - DoS

Title source: llm
STIX 2.1

Description

IBM Spectrum Scale (5.1.0.0 through 5.1.2.8 and 5.1.3.0 through 5.1.5.1) and IBM Elastic Storage System (6.1.0.0 through 6.1.2.4 and 6.1.3.0 through 6.1.4.1) could allow an authenticated user to cause a denial of service through the GUI using a format string attack. IBM X-Force ID: 239539.

Scores

CVSS v3 6.5
EPSS 0.0065
EPSS Percentile 71.0%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-134
Status published
Products (2)
ibm/elastic_storage_system 6.1.0.0 - 6.1.2.4
ibm/spectrum_scale 5.1.0.0 - 5.1.2.8
Published Feb 12, 2023
Tracked Since Feb 18, 2026