Ibm Spectrum Scale vulnerabilities
59 known vulnerabilities affecting ibm/spectrum_scale.
Total CVEs
59
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1HIGH23MEDIUM30LOW5
Vulnerabilities
Page 2 of 3
CVE-2022-40607P4MEDIUMCVSS 6.8≤ 5.1.4.0v5.12022-12-19
CVE-2022-40607 [MEDIUM] CWE-22 CVE-2022-40607: IBM Spectrum Scale 5.1 could allow users with permissions to create pod, persistent volume and pers
IBM Spectrum Scale 5.1 could allow users with permissions to create pod, persistent volume and persistent volume claim to access files and directories outside of the volume, including on the host filesystem. IBM X-Force ID: 235740.
nvd
CVE-2015-7456P4MEDIUMCVSS 6.5v4.1.1.0v4.1.1.1+2 more2016-01-01
CVE-2015-7456 [MEDIUM] CWE-200 CVE-2015-7456: IBM Spectrum Scale 4.1.1 before 4.1.1.4, and 4.2.0.0, allows remote authenticated users to discover
IBM Spectrum Scale 4.1.1 before 4.1.1.4, and 4.2.0.0, allows remote authenticated users to discover object-storage admin passwords via unspecified vectors.
nvd
CVE-2016-2984P4HIGHCVSS 7.0v4.1.1.0v4.1.1.1+11 more2016-11-25
CVE-2016-2984 [HIGH] CWE-264 CVE-2016-2984: IBM Spectrum Scale 4.1.1.x before 4.1.1.8 and 4.2.x before 4.2.0.4 and General Parallel File System
IBM Spectrum Scale 4.1.1.x before 4.1.1.8 and 4.2.x before 4.2.0.4 and General Parallel File System (GPFS) 3.5.x before 3.5.0.32 and 4.1.x before 4.1.1.8 allow local users to gain privileges via crafted command-line parameters to a /usr/lpp/mmfs/bin/ setuid program.
nvd
CVE-2016-2985P4HIGHCVSS 7.0v4.1.1.0v4.1.1.1+11 more2016-11-25
CVE-2016-2985 [HIGH] CWE-264 CVE-2016-2985: IBM Spectrum Scale 4.1.1.x before 4.1.1.8 and 4.2.x before 4.2.0.4 and General Parallel File System
IBM Spectrum Scale 4.1.1.x before 4.1.1.8 and 4.2.x before 4.2.0.4 and General Parallel File System (GPFS) 3.5.x before 3.5.0.32 and 4.1.x before 4.1.1.8 allow local users to gain privileges via crafted environment variables to a /usr/lpp/mmfs/bin/ setuid program.
nvd
CVE-2022-43869P4MEDIUMCVSS 6.5≥ 5.1.0.0, ≤ 5.1.2.8≥ 5.1.3.0, ≤ 5.1.5.1+2 more2023-02-12
CVE-2022-43869 [MEDIUM] CWE-134 CVE-2022-43869: IBM Spectrum Scale (5.1.0.0 through 5.1.2.8 and 5.1.3.0 through 5.1.5.1) and IBM Elastic Storage Sys
IBM Spectrum Scale (5.1.0.0 through 5.1.2.8 and 5.1.3.0 through 5.1.5.1) and IBM Elastic Storage System (6.1.0.0 through 6.1.2.4 and 6.1.3.0 through 6.1.4.1) could allow an authenticated user to cause a denial of service through the GUI using a format string attack. IBM X-Force ID: 239539.
nvd
CVE-2015-4974P4HIGHCVSS 7.2v4.1.1.0v4.1.1.12015-10-26
CVE-2015-4974 [HIGH] CWE-77 CVE-2015-4974: IBM General Parallel File System (GPFS) 3.5.x before 3.5.0.27 and 4.1.x before 4.1.1.2 and Spectrum
IBM General Parallel File System (GPFS) 3.5.x before 3.5.0.27 and 4.1.x before 4.1.1.2 and Spectrum Scale 4.1.1.x before 4.1.1.2 allow local users to obtain root privileges for command execution via unspecified vectors.
nvd
CVE-2016-0263P4HIGHCVSS 7.0v4.1.1.1v4.1.1.2+4 more2016-06-29
CVE-2016-0263 [HIGH] CWE-264 CVE-2016-0263: IBM Spectrum Scale 4.1 before 4.1.1.5 and 4.2 before 4.2.0.2 and General Parallel File System 3.5 be
IBM Spectrum Scale 4.1 before 4.1.1.5 and 4.2 before 4.2.0.2 and General Parallel File System 3.5 before 3.5.0.30 allow local users to gain privileges or cause a denial of service via a crafted mmapplypolicy command.
nvd
CVE-2021-29708P4MEDIUMCVSS 6.7v5.1.0.12021-05-25
CVE-2021-29708 [MEDIUM] CVE-2021-29708: IBM Spectrum Scale 5.1.0.1 could allow a local with access to the GUI pod container to obtain sensit
IBM Spectrum Scale 5.1.0.1 could allow a local with access to the GUI pod container to obtain sensitive cryptographic keys that could allow them to elevate their privileges. IBM X-Force ID: 200883.
nvd
CVE-2015-7488P4MEDIUMCVSS 5.9v4.1.1.0v4.1.1.1+2 more2016-01-27
CVE-2015-7488 [MEDIUM] CWE-200 CVE-2015-7488: IBM Spectrum Scale 4.1.1.x before 4.1.1.4 and 4.2.x before 4.2.0.1, in certain LDAP File protocol co
IBM Spectrum Scale 4.1.1.x before 4.1.1.4 and 4.2.x before 4.2.0.1, in certain LDAP File protocol configurations, allows remote attackers to discover an LDAP password via unspecified vectors.
nvd
CVE-2020-4412P4MEDIUMCVSS 5.3≥ 4.2.0.0, ≤ 4.2.3.21≥ 5.0.0.0, ≤ 5.0.4.3+4 more2020-05-19
CVE-2020-4412 [MEDIUM] CVE-2020-4412: The Spectrum Scale 4.2.0.0 through 4.2.3.21 and 5.0.0.0 through 5.0.4.3 file system component is aff
The Spectrum Scale 4.2.0.0 through 4.2.3.21 and 5.0.0.0 through 5.0.4.3 file system component is affected by a denial of service security vulnerability. An attacker can force the Spectrum Scale mmfsd/mmsdrserv daemons to unexpectedly exit, impacting the functionality of the Spectrum Scale cluster and the availability of file systems managed by Spectrum Scale.
nvd
CVE-2018-1723P4MEDIUMCVSS 5.5≥ 4.1.0.0, ≤ 4.1.1.20≥ 4.2.0.0, ≤ 4.2.3.10+7 more2018-10-05
CVE-2018-1723 [MEDIUM] CWE-200 CVE-2018-1723: IBM Spectrum Scale 4.1.1.0, 4.1.1.20, 4.2.0.0, 4.2.3.10, 5.0.0 and 5.0.1.2 could allow an unprivileg
IBM Spectrum Scale 4.1.1.0, 4.1.1.20, 4.2.0.0, 4.2.3.10, 5.0.0 and 5.0.1.2 could allow an unprivileged, authenticated user with access to a GPFS node to read arbitrary files available on this node. IBM X-Force ID: 147373.
nvd
CVE-2020-4748P4MEDIUMCVSS 6.1≤ 5.0.5.2v5.0.0+1 more2020-10-20
CVE-2020-4748 [MEDIUM] CWE-79 CVE-2020-4748: IBM Spectrum Scale 5.0.0 through 5.0.5.2 is vulnerable to cross-site scripting. This vulnerability a
IBM Spectrum Scale 5.0.0 through 5.0.5.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 188517.
nvd
CVE-2020-4755P4MEDIUMCVSS 5.4≤ 5.0.5.2v5.0.0+1 more2020-10-20
CVE-2020-4755 [MEDIUM] CWE-79 CVE-2020-4755: IBM Spectrum Scale 5.0.0 through 5.0.5.2 is vulnerable to cross-site scripting. This vulnerability a
IBM Spectrum Scale 5.0.0 through 5.0.5.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 188595.
nvd
CVE-2021-29666P4MEDIUMCVSS 5.4≥ 5.0.0, ≤ 5.0.5.6≥ 5.1.0, ≤ 5.1.0.2+4 more2021-04-27
CVE-2021-29666 [MEDIUM] CWE-79 CVE-2021-29666: IBM Spectrum Scale 5.0.0 through 5.0.5.6 and 5.1.0 through 5.1.0.2 is vulnerable to cross-site scrip
IBM Spectrum Scale 5.0.0 through 5.0.5.6 and 5.1.0 through 5.1.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 199400.
nvd
CVE-2020-4378P4MEDIUMCVSS 4.9≥ 5.0.0.0, ≤ 5.0.4.4v5.0.0+1 more2020-05-27
CVE-2020-4378 [MEDIUM] CVE-2020-4378: IBM Spectrum Scale 5.0.0.0 through 5.0.4.4 could allow a privileged authenticated user to perform un
IBM Spectrum Scale 5.0.0.0 through 5.0.4.4 could allow a privileged authenticated user to perform unauthorized actions using a specially crated HTTP POST command. IBM X-Force ID: 179157.
nvd
CVE-2018-1782P4MEDIUMCVSS 6.5v5.0.1.0v5.0.1.12018-09-19
CVE-2018-1782 [MEDIUM] CVE-2018-1782: IBM GPFS (IBM Spectrum Scale 5.0.1.0 and 5.0.1.1) allows a local, unprivileged user to cause a kerne
IBM GPFS (IBM Spectrum Scale 5.0.1.0 and 5.0.1.1) allows a local, unprivileged user to cause a kernel panic on a node running GPFS by accessing a file that is stored on a GPFS file system with mmap, or by executing a crafted file stored on a GPFS file system. IBM X-Force ID: 148805.
nvd
CVE-2019-4259P4MEDIUMCVSS 5.5≥ 4.1.1.0, ≤ 4.1.1.22≥ 4.2.0.0, ≤ 4.2.3.13+7 more2019-05-13
CVE-2019-4259 [MEDIUM] CVE-2019-4259: A security vulnerability has been identified in IBM Spectrum Scale 4.1.1, 4.2.0, 4.2.1, 4.2.2, 4.2.3
A security vulnerability has been identified in IBM Spectrum Scale 4.1.1, 4.2.0, 4.2.1, 4.2.2, 4.2.3, and 5.0.0 with CES stack enabled that could allow sensitive data to be included with service snaps. IBM X-Force ID: 160011.
nvd
CVE-2020-4358P4MEDIUMCVSS 5.4≥ 5.0.0.0, ≤ 5.0.4.4v5.0.0+1 more2020-05-27
CVE-2020-4358 [MEDIUM] CWE-79 CVE-2020-4358: IBM Spectrum Scale 5.0.0.0 through 5.0.4.4 is vulnerable to cross-site scripting. This vulnerability
IBM Spectrum Scale 5.0.0.0 through 5.0.4.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 178762.
nvd
CVE-2019-4665P4MEDIUMCVSS 5.4≥ 4.2.0.0, ≤ 4.2.3.18≥ 5.0.0.0, ≤ 5.0.4.0+2 more2019-12-11
CVE-2019-4665 [MEDIUM] CWE-79 CVE-2019-4665: IBM Spectrum Scale 4.2 and 5.0 is vulnerable to cross-site scripting. This vulnerability allows user
IBM Spectrum Scale 4.2 and 5.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 171247.
nvd
CVE-2020-4851P4MEDIUMCVSS 5.5≥ 5.0.0.0, < 5.0.5.5≥ 5.1.0.0, < 5.1.0.2+4 more2021-03-16
CVE-2020-4851 [MEDIUM] CWE-74 CVE-2020-4851: IBM Spectrum Scale 5.0.0 through 5.0.5.5 and 5.1.0 through 5.1.0.2 could allow a local user to poiso
IBM Spectrum Scale 5.0.0 through 5.0.5.5 and 5.1.0 through 5.1.0.2 could allow a local user to poison log files which could impact support and development efforts. IBM X-Force ID: 190450.
nvd