Lucene search
HistoryOct 26, 2015 - 2:59 a.m.
CVE-2015-4974
ibm
gpfs
spectrum scale
cve-2015-4974
local privilege escalation
security vulnerability
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
4.2 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
5.1%
IBM General Parallel File System (GPFS) 3.5.x before 3.5.0.27 and 4.1.x before 4.1.1.2 and Spectrum Scale 4.1.1.x before 4.1.1.2 allow local users to obtain root privileges for command execution via unspecified vectors.
Affected configurations
Node
ibmgeneral_parallel_file_systemMatch3.5
ORibmgeneral_parallel_file_systemMatch3.5.0.0
ORibmgeneral_parallel_file_systemMatch3.5.0.2
ORibmgeneral_parallel_file_systemMatch3.5.0.3
ORibmgeneral_parallel_file_systemMatch3.5.0.4
ORibmgeneral_parallel_file_systemMatch3.5.0.6
ORibmgeneral_parallel_file_systemMatch3.5.0.7
ORibmgeneral_parallel_file_systemMatch3.5.0.8
ORibmgeneral_parallel_file_systemMatch3.5.0.9
ORibmgeneral_parallel_file_systemMatch3.5.0.10
ORibmgeneral_parallel_file_systemMatch3.5.0.11
ORibmgeneral_parallel_file_systemMatch3.5.0.12
ORibmgeneral_parallel_file_systemMatch3.5.0.13
ORibmgeneral_parallel_file_systemMatch3.5.0.14
ORibmgeneral_parallel_file_systemMatch3.5.0.15
ORibmgeneral_parallel_file_systemMatch3.5.0.16
ORibmgeneral_parallel_file_systemMatch3.5.0.17
ORibmgeneral_parallel_file_systemMatch3.5.0.18
ORibmgeneral_parallel_file_systemMatch3.5.0.19
ORibmgeneral_parallel_file_systemMatch3.5.0.20
ORibmgeneral_parallel_file_systemMatch3.5.0.21
ORibmgeneral_parallel_file_systemMatch3.5.0.22
ORibmgeneral_parallel_file_systemMatch3.5.0.23
ORibmgeneral_parallel_file_systemMatch3.5.0.24
ORibmgeneral_parallel_file_systemMatch3.5.0.25
ORibmgeneral_parallel_file_systemMatch3.5.0.26
ORibmspectrum_scaleMatch4.1.1.0
ORibmspectrum_scaleMatch4.1.1.1
Related
prion
prion
Command injection
2015-10-26 02:59:00
nvd
nvd
CVE-2015-4974
2015-10-26 02:59:00
cvelist
cvelist
CVE-2015-4974
2015-10-26 01:00:00
ibm
ibm
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
4.2 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
5.1%
Related for CVE-2015-4974