Spectrum Scale (Ibm) - vulnerabilities (CVEs)

58 CVEs, 0 in the last 30 days, 136 known versions, newest CVE from 2024-02-17. Vendor: Ibm.

CVEs of Spectrum Scale

CVE-2022-41738 - CVSS 7.5 (high), 2024-02-17: IBM Storage Scale Container Native Storage Access 5.1.2.1 -through 5.1.7.0 could allow an attacker to initiate connections to containers from external…
CVE-2022-43843 - CVSS 7.5 (high), 2023-12-14: IBM Spectrum Scale 5.1.5.0 through 5.1.5.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive…
CVE-2023-30434 - CVSS 6.2 (medium), 2023-05-05: IBM Storage Scale (IBM Spectrum Scale 5.1.0.0 through 5.1.2.9, 5.1.3.0 through 5.1.6.1 and IBM Elastic Storage Systems 6.1.0.0 through 6.1.2.5, 6.1.3.0…
CVE-2020-4927 - CVSS 8.2 (high), 2023-03-15: A vulnerability in the Spectrum Scale 5.0.5.0 through 5.1.6.1 core component could allow unauthorized access to user data or injection of arbitrary data in…
CVE-2022-43869 - CVSS 6.5 (medium), 2023-02-12: IBM Spectrum Scale (5.1.0.0 through 5.1.2.8 and 5.1.3.0 through 5.1.5.1) and IBM Elastic Storage System (6.1.0.0 through 6.1.2.4 and 6.1.3.0 through 6.1.4.1)…
CVE-2022-40607 - CVSS 6.8 (medium), 2022-12-19: IBM Spectrum Scale 5.1 could allow users with permissions to create pod, persistent volume and persistent volume claim to access files and directories outside…
CVE-2022-43867 - CVSS 7.8 (high), 2022-12-06: IBM Spectrum Scale 5.1.0.1 through 5.1.4.1 could allow a local attacker to execute arbitrary commands in the container. IBM X-Force ID: 239437.
CVE-2020-4926 - CVSS 9.1 (critical), 2022-05-24: A vulnerability in the Spectrum Scale 5.1 core component and IBM Elastic Storage System 6.1 could allow unauthorized access to user data or injection of…
CVE-2022-22368 - CVSS 7.5 (high), 2022-05-03: IBM Spectrum Scale 5.1.0 through 5.1.3.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive…
CVE-2020-4925 - CVSS 6.2 (medium), 2022-03-01: A security vulnerability in the Spectrum Scale 5.0 and 5.1 allows a non-root user to overflow the mmfsd daemon with requests and preventing the daemon to…
CVE-2021-38882 - CVSS 4.4 (medium), 2021-11-16: IBM Spectrum Scale 5.1.0 through 5.1.1.1 could allow a privileged admin to destroy filesystem audit logging records before expiration time. IBM X-Force ID:…
CVE-2021-29740 - CVSS 8.4 (high), 2021-06-01: IBM Spectrum Scale 5.0.0 through 5.0.5.6 and 5.1.0 through 5.1.0.3 system core component is affected by a format string security vulnerability. An attacker…
CVE-2021-29708 - CVSS 6.7 (medium), 2021-05-25: IBM Spectrum Scale 5.1.0.1 could allow a local with access to the GUI pod container to obtain sensitive cryptographic keys that could allow them to elevate…
CVE-2020-4850 - CVSS 7.5 (high), 2021-05-20: IBM Spectrum Scale 1.1.1.0 through 1.1.8.4 Transparent Cloud Tiering could allow a remote attacker to obtain sensitive information, caused by the leftover…
CVE-2021-29666 - CVSS 5.4 (medium), 2021-04-27: IBM Spectrum Scale 5.0.0 through 5.0.5.6 and 5.1.0 through 5.1.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary…
CVE-2020-4981 - CVSS 6 (medium), 2021-04-27: IBM Spectrum Scale 5.0.4.1 through 5.1.0.3 could allow a local privileged user to overwrite files due to improper input validation. IBM X-Force ID: 192541.
CVE-2021-29667 - CVSS 7.8 (high), 2021-04-27: IBM Spectrum Scale 5.0.0 through 5.0.5.6 and 5.1.0 through 5.1.0.2 is potentially vulnerable to CSV Injection. A remote attacker could execute arbitrary…
CVE-2021-29671 - CVSS 4 (medium), 2021-04-09: IBM Spectrum Scale 5.1.0.1 could allow a local attacker to bypass the filesystem audit logging mechanism when file audit logging is enabled. IBM X-Force ID:…
CVE-2020-4891 - CVSS 6.2 (medium), 2021-03-16: IBM Spectrum Scale 5.0.0 through 5.0.5.5 and 5.1.0 through 5.1.0.2 uses an inadequate account lockout setting that could allow a local user er to brute force…
CVE-2020-4890 - CVSS 4.4 (medium), 2021-03-16: IBM Spectrum Scale 5.0.0 through 5.0.5.5 and 5.1.0 through 5.1.0.2 could allow a local user with a valid role to the REST API to cause a denial of service due…
CVE-2020-4851 - CVSS 5.5 (medium), 2021-03-16: IBM Spectrum Scale 5.0.0 through 5.0.5.5 and 5.1.0 through 5.1.0.2 could allow a local user to poison log files which could impact support and development…
CVE-2020-4889 - CVSS 4 (medium), 2021-01-26: IBM Spectrum Scale 5.0.0 through 5.0.5.4 and 5.1.0 could allow a local user to poison log files which could impact support and development efforts. IBM…
CVE-2020-4748 - CVSS 6.1 (medium), 2020-10-20: IBM Spectrum Scale 5.0.0 through 5.0.5.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web…
CVE-2020-4756 - CVSS 6.2 (medium), 2020-10-20: IBM Spectrum Scale V4.2.0.0 through V4.2.3.23 and V5.0.0.0 through V5.0.5.2 as well as IBM Elastic Storage System 6.0.0 through 6.0.1.0 could allow a local…
CVE-2020-4755 - CVSS 5.4 (medium), 2020-10-20: IBM Spectrum Scale 5.0.0 through 5.0.5.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web…
CVE-2020-4749 - CVSS 4.3 (medium), 2020-10-20: IBM Spectrum Scale 5.0.0 through 5.0.5.2 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie…
CVE-2020-4491 - CVSS 5.5 (medium), 2020-10-20: IBM Spectrum Scale V4.2.0.0 through V4.2.3.22 and V5.0.0.0 through V5.0.5 could allow a local attacker to cause a denial of service by sending a large number…
CVE-2020-4492 - CVSS 6.2 (medium), 2020-08-31: IBM Spectrum Scale V5.0.0.0 through V5.0.4.3 and V4.2.0.0 through V4.2.3.21 could allow a local attacker to cause a denial of service crashing the kernel by…
CVE-2020-4348 - CVSS 6.5 (medium), 2020-05-27: IBM Spectrum Scale 4.2.0.0 through 4.2.3.21 and 5.0.0.0 through 5.0.4.4 could allow an authenticated GUI user to perform unauthorized actions due to missing…
CVE-2020-4357 - CVSS 4.3 (medium), 2020-05-27: IBM Spectrum Scale 5.0.0.0 through 5.0.4.4 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned…
CVE-2020-4379 - CVSS 7.5 (high), 2020-05-27: IBM Spectrum Scale 5.0.0.0 through 5.0.4.4 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive…
CVE-2020-4350 - CVSS 7.5 (high), 2020-05-27: IBM Spectrum Scale 5.0.0.0 through 5.0.4.4 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive…
CVE-2020-4378 - CVSS 4.9 (medium), 2020-05-27: IBM Spectrum Scale 5.0.0.0 through 5.0.4.4 could allow a privileged authenticated user to perform unauthorized actions using a specially crated HTTP POST…
CVE-2020-4349 - CVSS 7.5 (high), 2020-05-27: IBM Spectrum Scale 5.0.0.0 through 5.0.4.4 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive…
CVE-2020-4358 - CVSS 5.4 (medium), 2020-05-27: IBM Spectrum Scale 5.0.0.0 through 5.0.4.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the…
CVE-2020-4412 - CVSS 5.3 (medium), 2020-05-19: The Spectrum Scale 4.2.0.0 through 4.2.3.21 and 5.0.0.0 through 5.0.4.3 file system component is affected by a denial of service security vulnerability. An…
CVE-2020-4411 - CVSS 7.1 (high), 2020-05-19: The Spectrum Scale 4.2.0.0 through 4.2.3.21 and 5.0.0.0 through 5.0.4.3 file system component is affected by a denial of service vulnerability in its kernel…
CVE-2020-4273 - CVSS 7.8 (high), 2020-04-03: IBM Spectrum Scale 4.2 and 5.0 could allow a local unprivileged attacker with intimate knowledge of the enviornment to execute commands as root using…
CVE-2020-4242 - CVSS 8.8 (high), 2020-03-31: IBM Spectrum Scale and IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow a remote authenticated attacker to execute arbitrary commands on the…
CVE-2020-4241 - CVSS 8.8 (high), 2020-03-31: IBM Spectrum Scale and IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow a remote authenticated attacker to execute arbitrary commands on the…
CVE-2020-4217 - CVSS 7.5 (high), 2020-03-09: The IBM Spectrum Scale 4.2 and 5.0 file system component is affected by a denial of service security vulnerability. An attacker can force the Spectrum Scale…
CVE-2019-4715 - CVSS 8.8 (high), 2019-12-11: IBM Spectrum Scale 4.2 and 5.0 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially-crafted…
CVE-2019-4665 - CVSS 5.4 (medium), 2019-12-11: IBM Spectrum Scale 4.2 and 5.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus…
CVE-2019-4558 - CVSS 8.1 (high), 2019-10-09: A security vulnerability has been identified in all levels of IBM Spectrum Scale V5.0.0.0 through V5.0.3.2 and IBM Spectrum Scale V4.2.0.0 through V4.2.3.17…
CVE-2019-4259 - CVSS 5.5 (medium), 2019-05-13: A security vulnerability has been identified in IBM Spectrum Scale 4.1.1, 4.2.0, 4.2.1, 4.2.2, 4.2.3, and 5.0.0 with CES stack enabled that could allow…
CVE-2018-1993 - CVSS 4 (medium), 2019-01-08: IBM Spectrum Scale (GPFS) 4.1.1, 4.2.0, 4.2.1, 4.2.2, 4.2.3, and 5.0.0 where the use of Local Read Only Cache (LROC) is enabled may caused read operation on a…
CVE-2018-1723 - CVSS 6.2 (medium), 2018-10-05: IBM Spectrum Scale 4.1.1.0, 4.1.1.20, 4.2.0.0, 4.2.3.10, 5.0.0 and 5.0.1.2 could allow an unprivileged, authenticated user with access to a GPFS node to read…
CVE-2018-1783 - CVSS 5.5 (medium), 2018-10-05: IBM GPFS (IBM Spectrum Scale 4.1.1.0, 4.1.1.20, 4.2.0.0, 4.2.3.10, 5.0.0 and 5.0.1.2) command line utility allows an unprivileged, authenticated user with…
CVE-2018-1782 - CVSS 6.5 (medium), 2018-09-19: IBM GPFS (IBM Spectrum Scale 5.0.1.0 and 5.0.1.1) allows a local, unprivileged user to cause a kernel panic on a node running GPFS by accessing a file that is…
CVE-2018-1431 - CVSS 7.8 (high), 2018-06-13: A vulnerability in GSKit affects IBM Spectrum Scale 4.1.1, 4.2.0, 4.2.1, 4.2.3, and 5.0.0 that could allow a local attacker to obtain control of the Spectrum…
CVE-2017-1654 - CVSS 4 (medium), 2018-03-02: IBM Spectrum Scale 4.1.1 and 4.2.0 - 4.2.3 could allow a local unprivileged user access to information located in dump files. User data could be sent to IBM…
CVE-2016-6115 - CVSS 7.2 (high), 2017-02-01: IBM General Parallel File System is vulnerable to a buffer overflow. A remote authenticated attacker could overflow a buffer and execute arbitrary code on the…
CVE-2016-2985 - CVSS 7 (high), 2016-11-25: IBM Spectrum Scale 4.1.1.x before 4.1.1.8 and 4.2.x before 4.2.0.4 and General Parallel File System (GPFS) 3.5.x before 3.5.0.32 and 4.1.x before 4.1.1.8…
CVE-2016-2984 - CVSS 7 (high), 2016-11-25: IBM Spectrum Scale 4.1.1.x before 4.1.1.8 and 4.2.x before 4.2.0.4 and General Parallel File System (GPFS) 3.5.x before 3.5.0.32 and 4.1.x before 4.1.1.8…
CVE-2016-0263 - CVSS 7 (high), 2016-06-29: IBM Spectrum Scale 4.1 before 4.1.1.5 and 4.2 before 4.2.0.2 and General Parallel File System 3.5 before 3.5.0.30 allow local users to gain privileges or…
CVE-2015-7488 - CVSS 5.9 (medium), 2016-01-27: IBM Spectrum Scale 4.1.1.x before 4.1.1.4 and 4.2.x before 4.2.0.1, in certain LDAP File protocol configurations, allows remote attackers to discover an LDAP…
CVE-2015-7403 - CVSS 4 (medium), 2016-01-02: IBM Spectrum Scale 4.1.1.x before 4.1.1.3 and General Parallel File System (GPFS) 3.5.x before 3.5.0.29 and 4.1.x through 4.1.0.8 on AIX allow local users to…
CVE-2015-7456 - CVSS 6.5 (medium), 2016-01-01: IBM Spectrum Scale 4.1.1 before 4.1.1.4, and 4.2.0.0, allows remote authenticated users to discover object-storage admin passwords via unspecified vectors.
CVE-2015-4981 - CVSS 2.1 (low), 2015-10-26: IBM General Parallel File System (GPFS) 3.5.x before 3.5.0.27 and 4.1.x before 4.1.1.2 and Spectrum Scale 4.1.1.x before 4.1.1.2 allow local users to obtain…
CVE-2015-4974 - CVSS 7.2 (high), 2015-10-26: IBM General Parallel File System (GPFS) 3.5.x before 3.5.0.27 and 4.1.x before 4.1.1.2 and Spectrum Scale 4.1.1.x before 4.1.1.2 allow local users to obtain…