Code injection

IBM Spectrum Scale V4.2.0.0 through V4.2.3.23 and V5.0.0.0 through V5.0.5.2 as well as IBM Elastic Storage System 6.0.0 through 6.0.1.0 could allow a local attacker to invoke a subset of ioctls on the device with invalid arguments that could crash the keneral and cause a denial of service. IBM...

CVE-2020-4756

IBM Spectrum Scale V4.2.0.0 through V4.2.3.23 and V5.0.0.0 through V5.0.5.2 as well as IBM Elastic Storage System 6.0.0 through 6.0.1.0 could allow a local attacker to invoke a subset of ioctls on the device with invalid arguments that could crash the keneral and cause a denial of service. IBM...

CVE-2020-4756

Summary of CVE-2020-4756 : Affects IBM Spectrum Scale versions 4.2.0.0–4.2.3.23 and 5.0.0.0–5.0.5.2, and IBM Elastic Storage System 6.0.0–6.0.1.0. A local attacker could invoke a subset of ioctls with invalid arguments, potentially crashing the kernel and causing a denial of service. Remediation ...

CVE-2020-4756: Improper Resource Shutdown or Release

IBM Spectrum Scale V4.2.0.0 through V4.2.3.23 and V5.0.0.0 through V5.0.5.2 as well as IBM Elastic Storage System 6.0.0 through 6.0.1.0 could allow a local attacker to invoke a subset of ioctls on the device with invalid arguments that could crash the keneral and cause a denial of service. IBM...

PT-2020-18227

Name of the Vulnerable Software and Affected Versions IBM Spectrum Scale versions 4.2.0.0 through 4.2.3.23 IBM Spectrum Scale versions 5.0.0.0 through 5.0.5.2 IBM Elastic Storage System versions 6.0.0 through 6.0.1.0 Description The issue allows a local attacker to invoke a subset of ioctls on th...

IBM Elastic Storage System Denial of Service Vulnerability

IBM Elastic Storage System is an appliance for data management of large data volumes from IBM in the United States. A security vulnerability exists in IBM Elastic Storage System, which can be exploited by attackers to cause a denial of service...

Security Bulletin: Multiple vulnerabilities in the Linux Kernel used in IBM Elastic Storage System

Summary There are security vulnerabilities in versions of the Linux Kernel that are shipped with the Elastic Storage System. A fix for these vulnerabilities in available. Vulnerability Details CVEID: CVE-2020-1749 DESCRIPTION: Linux Kernel could allow a remote attacker to obtain sensitive...

CVE-2020-4756

IBM Spectrum Scale V4.2.0.0 through V4.2.3.23 and V5.0.0.0 through V5.0.5.2 as well as IBM Elastic Storage System 6.0.0 through 6.0.1.0 could allow a local attacker to invoke a subset of ioctls on the device with invalid arguments that could crash the keneral and cause a denial of service. IBM...

Security Bulletin: IBM Elastic Storage System 3000 is affected by a vulnerability where an unprivileged user could execute commands as root ( CVE-2020-4273)

Summary A security vulnerability has been identified in all levels of IBM Elastic Storage System that could allow an unprivileged user to execute commands as root. A fix for this vulnerability is available. Vulnerability Details CVEID: CVE-2020-4273 DESCRIPTION: IBM Spectrum Scale 4.2 and 5.0 cou...

Security Bulletin: Ansible vulnerability affects IBM Elastic Storage System 3000 (CVE-2020-1734)

Summary Ansible, which is used in IBM Elastic Storage System 3000 could allow a remote attacker to execute arbitrary commands Vulnerability Details CVEID: CVE-2020-1734 DESCRIPTION: Ansible could allow a remote attacker to execute arbitrary commands on the system, caused by a flaw in the pipe...

Security Bulletin: A vulnerability in IBM WebSphere Application Server Liberty affects IBM Spectrum Scale packaged in IBM Elastic Storage System 3000(CVE-2019-4720)

Summary There is a vulnerability in IBM WebSphere Application Server Liberty, used by IBM Elastic Storage System 3000, which could allow a remote attacker to cause a denial of service. Vulnerability Details CVEID: CVE-2019-4720 DESCRIPTION: IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 ...