← Back

CVE-2024-31891

nvd nist
Published: Dec 14, 2024Modified: Jul 25, 2025

JSON object

Loading...
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: psirt@us.ibm.com (Secondary)

Description

IBM Storage Scale GUI 5.1.9.0 through 5.1.9.6 and 5.2.0.0 through 5.2.1.1 contains a local privilege escalation vulnerability. A malicious actor with command line access to the 'scalemgmt' user can elevate privileges to gain root access to the host operating system.

Affected (2)

Products: Ibm: Storage Scale
Ibm
1 product
Storage Scale
Configuration A
2 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Ibm
Storage Scale
From 5.1.9.0 to 5.1.9.7
Storage Scale
From 5.2.0.0 to 5.2.2.0
Running on/withPlatform Versions
Linux
Linux Kernel
All versions

Related CWEs

CWE-250
Execution with Unnecessary Privileges
The product performs an operation at a privilege level that is higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses.

References (1)

Source: psirt@us.ibm.com
Vendor Advisory

Timeline

No history available yet.