CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
Confidence
High
EPSS
Percentile
44.7%
IBM General Parallel File System (GPFS) in GPFS Storage Server 2.0.0 through 2.0.7 and Elastic Storage Server 2.5.x through 2.5.5, 3.x before 3.5.5, and 4.x before 4.0.3, as distributed in Spectrum Scale RAID, allows local users to gain privileges via a crafted parameter to a setuid program.
Vendor | Product | Version | CPE |
---|---|---|---|
ibm | elastic_storage_server | 2.5.0 | cpe:2.3:a:ibm:elastic_storage_server:2.5.0:*:*:*:*:*:*:* |
ibm | elastic_storage_server | 2.5.1 | cpe:2.3:a:ibm:elastic_storage_server:2.5.1:*:*:*:*:*:*:* |
ibm | elastic_storage_server | 2.5.2 | cpe:2.3:a:ibm:elastic_storage_server:2.5.2:*:*:*:*:*:*:* |
ibm | elastic_storage_server | 2.5.3 | cpe:2.3:a:ibm:elastic_storage_server:2.5.3:*:*:*:*:*:*:* |
ibm | elastic_storage_server | 2.5.4 | cpe:2.3:a:ibm:elastic_storage_server:2.5.4:*:*:*:*:*:*:* |
ibm | elastic_storage_server | 2.5.5 | cpe:2.3:a:ibm:elastic_storage_server:2.5.5:*:*:*:*:*:*:* |
ibm | elastic_storage_server | 3.0.0 | cpe:2.3:a:ibm:elastic_storage_server:3.0.0:*:*:*:*:*:*:* |
ibm | elastic_storage_server | 3.0.1 | cpe:2.3:a:ibm:elastic_storage_server:3.0.1:*:*:*:*:*:*:* |
ibm | elastic_storage_server | 3.0.2 | cpe:2.3:a:ibm:elastic_storage_server:3.0.2:*:*:*:*:*:*:* |
ibm | elastic_storage_server | 3.0.3 | cpe:2.3:a:ibm:elastic_storage_server:3.0.3:*:*:*:*:*:*:* |
packetstormsecurity.com/files/137373/IBM-GPFS-Spectrum-Scale-Command-Injection.html
www-01.ibm.com/support/docview.wss?uid=ssg1S1005875
www-01.ibm.com/support/docview.wss?uid=swg1IV84206
www.securityfocus.com/archive/1/538620/100/0/threaded
www.securityfocus.com/bid/91082
www.securitytracker.com/id/1036458
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
Confidence
High
EPSS
Percentile
44.7%