IBM Transformation Advisor Privilege Escalation Vulnerability in Operator Catalog Image

A privilege escalation vulnerability has been identified in IBM Transformation Advisor versions 2.0.1 through 4.3.1. The issue arises from incorrect privilege assignments to security-critical files, potentially allowing local root access within a container running the IBM Transformation Advisor Operator Catalog image.

Impact

Exploitation of this vulnerability could lead to unauthorized local root access within the affected container.

Remediation

Users are advised to update to version 4.3.2, available from the OperatorHub page in Red Hat OpenShift Container Platform or locally via the IBM Cloud Transformation Advisor trial link.