CVE-2024-27261: IBM Storage Defender - Resiliency Service privilege escalation
IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.2 could allow a privileged user to install a potentially dangerous tar file, which could give them access to subsequent systems where the package was installed. IBM X-Force ID: 283986.
Other sources
IBM Storage Defender - Resiliency Service could allow a privileged user to install a potentially dangerous tar file, which could give them access to subsequent systems where the package was installed.
— IBM
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-27261?
CVE-2024-27261 is considered a critical vulnerability due to the potential for privileged users to install dangerous files.
How do I fix CVE-2024-27261?
To fix CVE-2024-27261, upgrade IBM Storage Defender - Resiliency Service to version 2.0.3 or later.
What are the vulnerabilities associated with CVE-2024-27261?
CVE-2024-27261 allows a privileged user to install a potentially dangerous tar file that could lead to unauthorized access.
Who is affected by CVE-2024-27261?
CVE-2024-27261 affects users running IBM Storage Defender - Resiliency Service versions 2.0.0 through 2.0.2.
What kind of systems could be compromised due to CVE-2024-27261?
Systems where the dangerous tar file is installed could be compromised as a result of CVE-2024-27261.