CVE-2016-0361

published 2016-08-08

CVE-2016-0361: IBM General Parallel File System (GPFS) 3.5 before 3.5.0.29 efix 6 and 4.1.1 before 4.1.1.4 efix 9, when the Spectrum Scale GUI is used with DB2 on Linux, UNIX…

Priority P4 34 medium 6.5 CVSS 3.0

AV N AC L PR L UI N S U C H I N A N

IBM General Parallel File System (GPFS) 3.5 before 3.5.0.29 efix 6 and 4.1.1 before 4.1.1.4 efix 9, when the Spectrum Scale GUI is used with DB2 on Linux, UNIX and Windows, allows remote authenticated users to obtain sensitive information via unspecified vectors, as demonstrated by discovering ADMIN passwords.

Affected

7 ranges

Vendor	Product	Version range	Fixed in
ibm	general_parallel_file_system	—	—
ibm	general_parallel_file_system	—	—
ibm	general_parallel_file_system	—	—
ibm	general_parallel_file_system	—	—
ibm	general_parallel_file_system	—	—
ibm	general_parallel_file_system	—	—
ibm	general_parallel_file_system	—	—

CVSS provenance

nvd v3.0 6.5 MEDIUM CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

nvd v2.0 4.0 MEDIUM AV:N/AC:L/Au:S/C:P/I:N/A:N

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.