{"id":"CVE-2022-41739","aliases":["EUVD-2022-44910","GHSA-5v6x-pq3h-wvrm"],"status":"published","title":"IBM Spectrum Scale privilege escalation","description":"IBM Spectrum Scale (IBM Spectrum Scale Container Native Storage Access 5.1.2.1 through 5.1.6.0) could allow programs running inside the container to overcome isolation mechanism and gain additional capabilities or access sensitive information on the host. IBM X-Force ID: 237815.","severity":{"version":"3.1","score":7.9,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00199,"percentile":0.09725,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2023-04-26T02:09:03Z","modified":"2026-06-17T05:03:44Z","products":[{"vendor":"ibm","product":"spectrum scale container native storage access"},{"vendor":"ibm","product":"spectrum_scale_container_native_storage_access"}],"references":[{"url":"https://www.ibm.com/support/pages/node/6964568","tags":["vendor-advisory","x_transferred","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/237815","tags":["vdb-entry","x_transferred","VDB Entry","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-41739"},{"url":"https://github.com/advisories/GHSA-5v6x-pq3h-wvrm"}],"sources":{"cve":[{"id":"CVE-2022-41739","title":"IBM Spectrum Scale privilege escalation","description":"\nIBM Spectrum Scale (IBM Spectrum Scale Container Native Storage Access 5.1.2.1 through 5.1.6.0) could allow programs running inside the container to overcome isolation mechanism and gain additional capabilities or access sensitive information on the host. IBM X-Force ID: 237815.\n\n","status":"published","published":"2023-04-26T02:09:03.525Z","modified":"2025-01-31T16:14:25.449Z","cvss":[{"version":"3.1","score":7.9,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:N","level":"high","assessor":"cna"}],"updated_at":"2026-11-02T14:34:28.038197Z"}],"euvd":[{"id":"EUVD-2022-44910","description":"\nIBM Spectrum Scale (IBM Spectrum Scale Container Native Storage Access 5.1.2.1 through 5.1.6.0) could allow programs running inside the container to overcome isolation mechanism and gain additional capabilities or access sensitive information on the host. IBM X-Force ID: 237815.\n\n","status":"published","published":"2023-04-26T02:09:03Z","modified":"2025-01-31T16:14:25Z","cvss":[{"version":"3.1","score":7.9,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:N","level":"high"}],"updated_at":"2026-11-03T00:04:08.172652Z"}],"ghsa":[{"id":"GHSA-5v6x-pq3h-wvrm","title":"\nIBM Spectrum Scale (IBM Spectrum Scale Container Native Storage Access 5.1.2.1 through 5.1.6.0)...","description":"\nIBM Spectrum Scale (IBM Spectrum Scale Container Native Storage Access 5.1.2.1 through 5.1.6.0) could allow programs running inside the container to overcome isolation mechanism and gain additional capabilities or access sensitive information on the host. IBM X-Force ID: 237815.\n\n","status":"published","published":"2023-04-26T03:30:33Z","modified":"2024-04-04T03:41:32Z","cvss":[{"version":"3.1","score":7.9,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T14:56:17.471503Z"}],"nvd":[{"id":"CVE-2022-41739","description":"\nIBM Spectrum Scale (IBM Spectrum Scale Container Native Storage Access 5.1.2.1 through 5.1.6.0) could allow programs running inside the container to overcome isolation mechanism and gain additional capabilities or access sensitive information on the host. IBM X-Force ID: 237815.\n\n","status":"published","published":"2023-04-26T03:15:08.767Z","modified":"2026-06-17T05:03:44.487Z","cvss":[{"version":"3.1","score":7.9,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:N","level":"high","assessor":"secondary"},{"version":"3.1","score":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:07:37.42466Z"}]}}