CVE-2019-4558 Privilege escalation in Spectrum Scale

High 8.1 Published 9 Oct 2019 Updated 16 Sep 2024

A local attacker can gain root privileges by injecting parameters into setuid files in IBM Spectrum Scale.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2019-4558?

CVE-2019-4558 is a high-severity vulnerability in Ibm Spectrum Scale, published on 9 Oct 2019. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

A security vulnerability has been identified in all levels of IBM Spectrum Scale V5.0.0.0 through V5.0.3.2 and IBM Spectrum Scale V4.2.0.0 through V4.2.3.17 that could allow a local attacker to obtain root privilege by injecting parameters into setuid files.

Weakness: CWE-74

Which versions are affected by CVE-2019-4558?

It affects 1 product.

Products include Ibm Spectrum Scale.

How do I fix CVE-2019-4558?

No fix has been published for CVE-2019-4558 yet. Limit exposure of the affected software until one is available.

Is CVE-2019-4558 being exploited?

There is no known exploitation of CVE-2019-4558 in the wild and no public exploit code.

All Ibm Spectrum Scale vulnerabilities

Sources

Also known as GHSA-cpr5-57mx-chhm.