What’s Vulnerable › Vulnerabilities

CVE-2022-40607: IBM Spectrum Scale directory traversal

• Severity: medium (CVSS 6.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-12-19 · updated 2026-06-17
• Weakness: CWE-22

Description

IBM Spectrum Scale 5.1 could allow users with permissions to create pod, persistent volume and persistent volume claim to access files and directories outside of the volume, including on the host filesystem. IBM X-Force ID: 235740.

Affected products

• IBM Spectrum Scale: through 5.1.4.0

References

• https://exchange.xforce.ibmcloud.com/vulnerabilities/235740
• https://www.ibm.com/support/pages/node/6848231
• https://exchange.xforce.ibmcloud.com/vulnerabilities/235740
• https://www.ibm.com/support/pages/node/6848231

Get alerted when CVE-2022-40607 or the next vulnerability affects your stack