Security Bulletin: A vulnerability in Certifi package may affect IBM Storage Scale (CVE-2022-23491)

Summary A vulnerability in Certifi package may affect the IBM Storage Scale call home feature. Vulnerability Details CVEID:CVE-2022-23491 DESCRIPTION: An unspecified error in with TrustCor's ownership also operated a business that produced spyware in Certifi has an unknown impact and attack vecto...

Security Bulletin: IBM Spectrum Scale is affected by a security vulnerability that can cause the kernel to panic (CVE-2023-30434)

Summary A security vulnerability has been identified in all levels of IBM Spectrum Scale that could allow a local user to cause the kernel to panic. A fix for this vulnerability is available. Vulnerability Details CVEID:CVE-2023-30434 DESCRIPTION: IBM Storage Scale could allow a local user to cau...

Security Bulletin: IBM Spectrum Scale Transparent Cloud Tiering is affected by a vulnerability in IBM® Runtime Environment Java™ (CVE-2021-2161)

Summary CVE-2021-2161 was disclosed as part of the Oracle April 2021 Critical Patch Update. Vulnerability Details CVEID:CVE-2021-2161 DESCRIPTION: An unspecified vulnerability in Java SE related to the Libraries component could allow an unauthenticated attacker to cause no confidentiality impact,...

Security Bulletin: IBM Spectrum Scale Transparent Cloud Tiering is affected by multiple vulnerabilities in IBM® Runtime Environment Java™

Summary Multiple vulnerabilities were disclosed as part of the Oracle October 2021 Critical Patch Update. Vulnerability Details CVEID:CVE-2021-35560 DESCRIPTION: An unspecified vulnerability in Java SE related to the Deployment component could allow an unauthenticated attacker to take control of...

CVE-2022-41736

IBM Spectrum Scale Container Native Storage Access 5.1.2.1 through 5.1.6.0 contains an unspecified vulnerability that could allow a local user to obtain root privileges. IBM X-Force ID: 237810...

Input validation

IBM Spectrum Scale Container Native Storage Access 5.1.2.1 through 5.1.6.0 contains an unspecified vulnerability that could allow a local user to obtain root privileges. IBM X-Force ID: 237810...

CVE-2022-41736 IBM Spectrum Scale Container Native Storage Access privilege escalation

IBM Spectrum Scale Container Native Storage Access 5.1.2.1 through 5.1.6.0 contains an unspecified vulnerability that could allow a local user to obtain root privileges. IBM X-Force ID: 237810...

CVE-2022-41736 IBM Spectrum Scale Container Native Storage Access privilege escalation

IBM Spectrum Scale Container Native Storage Access 5.1.2.1 through 5.1.6.0 contains an unspecified vulnerability that could allow a local user to obtain root privileges. IBM X-Force ID: 237810...

PT-2023-14026 · Ibm · Ibm Spectrum Scale Container Native Storage Access

Name of the Vulnerable Software and Affected Versions: IBM Spectrum Scale Container Native Storage Access versions 5.1.2.1 through 5.1.6.0 Description: The issue could allow a local user to obtain root privileges due to an unspecified vulnerability. Recommendations: For versions 5.1.2.1 through...

CVE-2022-41739

IBM Spectrum Scale IBM Spectrum Scale Container Native Storage Access 5.1.2.1 through 5.1.6.0 could allow programs running inside the container to overcome isolation mechanism and gain additional capabilities or access sensitive information on the host. IBM X-Force ID: 237815...

CVE-2022-41739

IBM Spectrum Scale IBM Spectrum Scale Container Native Storage Access 5.1.2.1 through 5.1.6.0 could allow programs running inside the container to overcome isolation mechanism and gain additional capabilities or access sensitive information on the host. IBM X-Force ID: 237815...

CVE-2022-41739 IBM Spectrum Scale privilege escalation

IBM Spectrum Scale IBM Spectrum Scale Container Native Storage Access 5.1.2.1 through 5.1.6.0 could allow programs running inside the container to overcome isolation mechanism and gain additional capabilities or access sensitive information on the host. IBM X-Force ID: 237815...

CVE-2022-41739 IBM Spectrum Scale privilege escalation

IBM Spectrum Scale IBM Spectrum Scale Container Native Storage Access 5.1.2.1 through 5.1.6.0 could allow programs running inside the container to overcome isolation mechanism and gain additional capabilities or access sensitive information on the host. IBM X-Force ID: 237815...

PT-2023-14027 · Ibm · Ibm Spectrum Scale

Name of the Vulnerable Software and Affected Versions: IBM Spectrum Scale versions 5.1.2.1 through 5.1.6.0 Description: The issue allows programs running inside the container to overcome the isolation mechanism, potentially gaining additional capabilities or accessing sensitive information on the...

Security Bulletin: A vulnerability has been identified in the IBM Spectrum Scale GUI where a remote authenticated user can execute commands [CVE-2022-45047]

Summary A security vulnerability has been identified in all levels of IBM Spectrum Scale GUI that could allow a remote authenticated user to execute commands. A fix for this vulnerability is available. Vulnerability Details CVEID:CVE-2022-45047 DESCRIPTION: Apache MINA SSHD could allow a remote...

Security Bulletin: A vulnerability in IBM Spectrum Scale Container Native that could allow access to confidential information on the host

Summary A security vulnerability has been identified in IBM Spectrum Scale Container Native that could allow access to confidential information on the host. A fix for this vulnerability is available. Vulnerability Details CVEID:CVE-2022-41739 DESCRIPTION: IBM Spectrum Scale could allow programs...

Security Bulletin: A vulnerability has been identified in IBM Spectrum Scale GUI where remote authenticated attacker can execute an arbitrary code on the system (CVE-2022-1471)

Summary A security vulnerability has been identified in all levels of IBM Spectrum Scale GUI where remote authenticated attacker can execute an arbitrary code on the system . A fix for this vulnerability is available. Vulnerability Details CVEID:CVE-2022-1471 DESCRIPTION: SnakeYaml could allow a...

Security Bulletin: A vulnerability in IBM Spectrum Scale Container Native that could allow an attacker acquiring root privileges on the host (CVE-2022-41736)

Summary A security vulnerability has been identified in IBM Spectrum Scale Container Native that could allow an attacker to acquire root privileges on the host using unshare. A fix for this vulnerability is available. Vulnerability Details CVEID:CVE-2022-41736 DESCRIPTION: IBM Spectrum Scale...

Security Bulletin: A vulnerability has been identified in IBM Spectrum Scale Data Access Services (DAS) which can cause denial of service.

Summary A security vulnerability has been identified in IBM Spectrum Scale Data Access Services DAS where Golang Go is vulnerable to denial of service. A fix for this vulnerability is available. Vulnerability Details CVEID:CVE-2022-41717 DESCRIPTION: Golang Go is vulnerable to a denial of service...

CVE-2020-4927 IBM Spectrum Scale information disclosure

A vulnerability in the Spectrum Scale 5.0.5.0 through 5.1.6.1 core component could allow unauthorized access to user data or injection of arbitrary data in the communication protocol. IBM X-Force ID: 191695...