CVE-2020-4349

IBM Spectrum Scale 5.0.0.0 through 5.0.4.4 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 178423...

PT-2020-18023

Name of the Vulnerable Software and Affected Versions IBM Spectrum Scale versions 5.0.0.0 through 5.0.4.4 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted...

IBM Spectrum Scale Cross-Site Scripting Vulnerability (CNVD-2020-30839)

IBM Spectrum Scale is a scalable data and file management solution from IBM USA based on IBM GPFS, an enterprise file management system optimized for petabyte-scale storage management. The product supports helping clients reduce storage costs while improving security and management efficiency in...

CVE-2020-4357: Generation of Error Message Containing Sensitive Information

IBM Spectrum Scale 5.0.0.0 through 5.0.4.4 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 178761...

CVE-2020-4378: Undefined Security Weakness

IBM Spectrum Scale 5.0.0.0 through 5.0.4.4 could allow a privileged authenticated user to perform unauthorized actions using a specially crated HTTP POST command. IBM X-Force ID: 179157...

CVE-2020-4379: Use of a Broken or Risky Cryptographic Algorithm

IBM Spectrum Scale 5.0.0.0 through 5.0.4.4 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 179158...

CVE-2020-4349: Use of a Broken or Risky Cryptographic Algorithm

IBM Spectrum Scale 5.0.0.0 through 5.0.4.4 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 178423...

PT-2020-18018

Name of the Vulnerable Software and Affected Versions IBM Spectrum Scale versions 5.0.0.0 through 5.0.4.4 Description The issue is related to the use of weaker than expected cryptographic algorithms, which could allow an attacker to decrypt highly sensitive information. Recommendations For IBM...

PT-2020-18022

Name of the Vulnerable Software and Affected Versions IBM Spectrum Scale versions 5.0.0.0 through 5.0.4.4 Description A remote attacker could obtain sensitive information when a detailed technical error message is returned in the browser, which could be used in further attacks against the system...

PT-2020-18038

Name of the Vulnerable Software and Affected Versions IBM Spectrum Scale versions 5.0.0.0 through 5.0.4.4 Description The issue is related to the use of weaker than expected cryptographic algorithms, which could allow an attacker to decrypt highly sensitive information. Recommendations For IBM...

CVE-2020-4350: Use of a Broken or Risky Cryptographic Algorithm

IBM Spectrum Scale 5.0.0.0 through 5.0.4.4 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 178424...

PT-2020-18019

Name of the Vulnerable Software and Affected Versions IBM Spectrum Scale versions 5.0.0.0 through 5.0.4.4 Description The issue is related to the use of weaker than expected cryptographic algorithms, which could allow an attacker to decrypt highly sensitive information. Recommendations For IBM...

IBM Spectrum Scale Encryption Issue Vulnerability

IBM Spectrum Scale is a scalable data and file management solution from IBM USA based on IBM GPFS, an enterprise file management system optimized for petabyte-scale storage management. The product supports helping clients reduce storage costs while improving security and management efficiency in...

IBM Spectrum Scale Unauthorized Operation Vulnerability

IBM Spectrum Scale is a scalable data and file management solution from IBM USA based on IBM GPFS, an enterprise file management system optimized for petabyte-scale storage management. The product supports helping clients reduce storage costs while improving security and management efficiency in...

CVE-2020-4348: Missing Authorization

IBM Spectrum Scale 4.2.0.0 through 4.2.3.21 and 5.0.0.0 through 5.0.4.4 could allow an authenticated GUI user to perform unauthorized actions due to missing function level access control. IBM X-Force ID: 178414...

CVE-2020-4358: Improper Neutralization of Input During Web Page Generation

IBM Spectrum Scale 5.0.0.0 through 5.0.4.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 17876...

PT-2020-18017

Name of the Vulnerable Software and Affected Versions IBM Spectrum Scale versions 4.2.0.0 through 4.2.3.21 IBM Spectrum Scale versions 5.0.0.0 through 5.0.4.4 Description The issue allows an authenticated GUI user to perform unauthorized actions due to missing function level access control...

PT-2020-18037

Name of the Vulnerable Software and Affected Versions IBM Spectrum Scale versions 5.0.0.0 through 5.0.4.4 Description The issue allows a privileged authenticated user to perform unauthorized actions using a specially crafted HTTP POST command. Recommendations For IBM Spectrum Scale versions 5.0.0...

Security Bulletin: A vulnerability in netty affects IBM Spectrum Scale Transparent Cloud Tiering(CVE-2020-7238)

Summary Netty is used by IBM Spectrum Scale Transparent Cloud Tiering. IBM Spectrum Scale Transparent Cloud Tiering has addressed the applicable CVE. Vulnerability Details CVEID: CVE-2020-7238 DESCRIPTION: Netty is vulnerable to HTTP request smuggling, caused by a flaw when handling...

Security Bulletin: A vulnerability has been identified in IBM Spectrum Scale GUI where authorised user can execute unauthorized function (CVE-2020-4378)

Summary A security vulnerability has been identified in all levels of IBM Spectrum Scale GUI. A fix for this vulnerability is available. Vulnerability Details CVEID: CVE-2020-4378 DESCRIPTION: IBM Spectrum Scale could allow a privileged authenticated user to perform unauthorized actions using a...