CVE Vulnerabilities

CVE-2024-31891

Execution with Unnecessary Privileges

Published: Dec 14, 2024 | Modified: Jul 25, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

IBM Storage Scale GUI 5.1.9.0 through 5.1.9.6 and 5.2.0.0 through 5.2.1.1

contains a local privilege escalation vulnerability. A malicious actor with command line access to the scalemgmt user can elevate privileges to gain root access to the host operating system.

Weakness

The product performs an operation at a privilege level that is higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses.

Affected Software

Name Vendor Start Version End Version
Storage_scale Ibm 5.1.9.0 (including) 5.1.9.7 (excluding)
Storage_scale Ibm 5.2.0.0 (including) 5.2.2.0 (excluding)

Potential Mitigations

References