CVE-2015-4974

CWE-77 — Command Injection3 documents3 sources
Severity
7.2HIGH
EPSS
0.1%
top 71.60%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
IBM General Parallel File SystemIBM Spectrum Scale
Timeline
PublishedOct 26
Latest updateMay 17

Description

IBM General Parallel File System (GPFS) 3.5.x before 3.5.0.27 and 4.1.x before 4.1.1.2 and Spectrum Scale 4.1.1.x before 4.1.1.2 allow local users to obtain root privileges for command execution via unspecified vectors.

CVSS vector

AV:L/AC:L/C:C/I:C/A:CExploitability: 3.9 | Impact: 10.0

Affected Packages2 packages

▶NVDibm/spectrum_scale4.1.1.0, 4.1.1.1+1

Patches

Patch: www-01.ibm.com ↗Patch: www-01.ibm.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-pvqq-j76p-pqrh: IBM General Parallel File System (GPFS) 3↗2022-05-17
▶
CVEList
CVE-2015-4974: IBM General Parallel File System (GPFS) 3↗2015-10-26
▶