CVE-2022-41736

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

IBM Spectrum Scale Container Native Storage Access

5.1.2.1 through 5.1.6.0

contains an unspecified vulnerability that could allow a local user to obtain root privileges. IBM X-Force ID: 237810.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

VendorProductVersions
IBMSpectrum Scale Container Native Storage Access>= 5.1.2.1, <= 5.1.6.0

References

Timeline

Published
Apr 29, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-417376.5IBM Storage Scale Container Native Storage Access 5.1.2.1 through 5.1.7.0 could allow a local attacker to initiate connections from a contaiCVE-2022-417387.5IBM Storage Scale Container Native Storage Access 5.1.2.1 -through 5.1.7.0 could allow an attacker to initiate connections to containers froCVE-2022-417398.4IBM Spectrum Scale (IBM Spectrum Scale Container Native Storage Access 5.1.2.1 through 5.1.6.0) could allow programs running inside the contCVE-2022-41748.8Type confusion in V8 in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to potentially exploit heap corruption via a crafted CVE-2022-417404.6IBM Robotic Process Automation 20.12 through 21.0.6 could allow an attacker with physical access to the system to obtain highly sensitive inCVE-2022-417417.8NGINX Open Source before versions 1.23.2 and 1.22.1, NGINX Open Source Subscription before versions R2 P1 and R1 P1, and NGINX Plus before vCVE-2022-417427.1NGINX Open Source before versions 1.23.2 and 1.22.1, NGINX Open Source Subscription before versions R2 P1 and R1 P1, and NGINX Plus before vCVE-2022-417437.0NGINX Plus before versions R27 P1 and R26 P1 have a vulnerability in the module ngx_http_hls_module that might allow a local attacker to corCVE-2022-417447.0A Time-of-Check Time-Of-Use vulnerability in the Trend Micro Apex One Vulnerability Protection integrated component could allow a local attaCVE-2022-417457.0An Out-of-Bounds access vulnerability in Trend Micro Apex One could allow a local attacker to create a specially crafted message to cause meCVE-2022-417469.1A forced browsing vulnerability in Trend Micro Apex One could allow an attacker with access to the Apex One console on affected installationCVE-2022-417477.8An improper certification validation vulnerability in Trend Micro Apex One agents could allow a local attacker to load a DLL file with syste
CVE-2022-41736: High severity, CVSS 7.8 | Vulnix