High severity · published Apr 26, 2023
CVE-2022-41739
IBM Spectrum Scale (IBM Spectrum Scale Container Native Storage Access 5.1.2.1 through 5.1.6.0) could allow programs running inside the container to overcome isolation mechanism…
8.4
CVSS
0.2%
EPSS
No
On KEV
Description
IBM Spectrum Scale (IBM Spectrum Scale Container Native Storage Access 5.1.2.1 through 5.1.6.0) could allow programs running inside the container to overcome isolation mechanism and gain additional capabilities or access sensitive information on the host. IBM X-Force ID: 237815.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
None
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 10% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SS
Spectrum Scale Container Native Storage Access · Ibm
5.1.2.1 through 5.1.6.0 · source: NVD
Affected product
SS
Spectrum Scale Container Native Storage Access
Ibm
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-41739
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-41739
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/237815
Patch
https://www.ibm.com/support/pages/node/6964568
More from Spectrum Scale Container Native Storage Access
8.8
CVE-2025-1137
IBM Storage Scale command injection
7.8
CVE-2022-43831
IBM Storage Scale Container Native Storage Access 5.1.2.1 through 5.1.6.1 could allow a local user to obtain escalated privileges on a host without proper security context…
7.8
CVE-2022-41736
IBM Spectrum Scale Container Native Storage Access 5.1.2.1 through 5.1.6.0 contains an unspecified vulnerability that could allow a local user to obtain root privileges
7.8
CVE-2022-43867
IBM Spectrum Scale 5.1.0.1 through 5.1.4.1 could allow a local attacker to execute arbitrary commands in the container
7.5
CVE-2022-41738
IBM Storage Scale Container Native Storage Access 5.1.2.1 -through 5.1.7.0 could allow an attacker to initiate connections to containers from external networks