CVE-2024-31892

Name of the Vulnerable Software and Affected Versions IBM Storage Scale GUI versions 5.1.9.0 through 5.1.9.6 IBM Storage Scale GUI versions 5.2.0.0 through 5.2.1.1

Description The issue allows a user to perform unauthorized actions after intercepting and modifying a csv file due to improper neutralization of formula elements.

Recommendations For IBM Storage Scale GUI versions 5.1.9.0 through 5.1.9.6, update to a version outside of this range to mitigate the risk. For IBM Storage Scale GUI versions 5.2.0.0 through 5.2.1.1, update to a version outside of this range to mitigate the risk. As a temporary workaround, consider restricting access to csv files and implementing additional validation mechanisms for formula elements until a patch is available.