IBM Spectrum Scale Encryption Issue Vulnerability (CNVD-2022-63371)

IBM Spectrum Scale is a scalable data and file management solution from IBM based on IBM GPFS (an enterprise file management system optimized for petabyte-scale storage management). The product supports helping customers reduce storage costs while improving security and management efficiency in cloud, big data and analytics environments, etc. IBM Spectrum Scale has an encryption problem vulnerability that stems from the use of a weaker-than-expected encryption algorithm, which could be exploited by an attacker to decrypt highly sensitive information.