CVE-2024-27261CWE-749

IBM Storage Defender - Resiliency Service privilege escalation

Medium · published April 12, 2024

CVSS v3.1
6.4
EPSS
0%
Percentile
18.3
In the wild
Unconfirmed
What it is

IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.2 could allow a privileged user to install a potentially dangerous tar file, which could give them access to subsequent systems where the package was installed. IBM X-Force ID: 283986.

The record
Technical detail
CVSS v3.1
6.4 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00271 · 18.3th percentile
Weakness
CWE-749 · Exposed Dangerous Method or Function
Published
2024-04-12T12:13Z
EPSS history
Timeline
  • 12 APR 12:13Z
    IBM Storage Defender - Resiliency Service privilege escalation
    cvelistv5