CVE-2022-40607

medium

Description

IBM Spectrum Scale 5.1 could allow users with permissions to create pod, persistent volume and persistent volume claim to access files and directories outside of the volume, including on the host filesystem. IBM X-Force ID: 235740.

References

https://www.ibm.com/support/pages/node/6848231

https://exchange.xforce.ibmcloud.com/vulnerabilities/235740

Details

Source: Mitre, NVD

Published: 2022-12-19

Updated: 2026-06-17

Risk Information

CVSS v2

Base Score: 6.1

Vector: CVSS2#AV:N/AC:L/Au:M/C:C/I:N/A:N

Severity: Medium

CVSS v3

Base Score: 6.8

Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

Severity: Medium

EPSS

EPSS: 0.00052