CVE-2022-41738 IBM Spectrum Scale security bypass

What is CVE-2022-41738?

CVE-2022-41738 is a high-severity authentication bypass vulnerability in IBM Storage Scale Container Native Storage Access, published on 17 Feb 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

IBM Storage Scale Container Native Storage Access 5.1.2.1 -through 5.1.7.0 could allow an attacker to initiate connections to containers from external networks. IBM X-Force ID: 237812.

Weakness: CWE-287

Which versions are affected by CVE-2022-41738?

It affects 1 product.

Products include Ibm Spectrum Scale Container Native Storage Access.

How do I fix CVE-2022-41738?

No fix has been published for CVE-2022-41738 yet. Limit exposure of the affected software until one is available.

Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.

Is CVE-2022-41738 being exploited?

There is no known exploitation of CVE-2022-41738 in the wild and no public exploit code.

Other vulnerabilities in IBM Storage Scale Container Native Storage Access

• CVE-2022-41736 IBM Spectrum Scale Container Native Storage Access privilege escalation High 8.4
• CVE-2022-41739 IBM Spectrum Scale privilege escalation High 7.9
• CVE-2022-43867 IBM Spectrum Scale command execution High 7.8
• CVE-2022-43831 IBM Spectrum Scale privilege escalation High 7.4
• CVE-2022-41737 IBM Spectrum Scale security bypass High 7.1

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-6v8w-fxm4-82jx.