The following vulnerabilities, which may affect IBM Storage Scale when a directory has a specific ACL composition and could lead to improper execute permissions, have been remediated in Storage Scale versions 5.2.3.6 and 6.0.0.2
IBM Storage Scale IBM S through rage Scale 5.2.3.0 - 5.2.3.5, and IBM S through rage Scale 6.0.0.0 - 6.0.0.1 could allow a local user to unintentionally trigger additional permissions for resources in a way that allows that resource to be executed by unintended actors.
Problem Types
| Type | CWE ID | Description |
|---|
| CWE | CWE-732 | CWE-732 Incorrect Permission Assignment for Critical Resource |
Type: CWE
Description: CWE-732 Incorrect Permission Assignment for Critical Resource
Metrics
| Version | Base score | Base severity | Vector |
|---|
| 3.1 | 6.6 | MEDIUM | CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N |
Version: 3.1
Base score: 6.6
Base severity: MEDIUM
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N