CVE-2018-1708

IBM Spectrum Symphony 7.1.2 and 7.2.0.2 could allow an authenticated user to obtain sensitive user information such as passwords through the WebUI. IBM X-Force ID: 146343...

CVE-2018-1724: Incorrect Permission Assignment for Critical Resource

IBM Spectrum LSF 9.1.1 9.1.2, 9.1.3, and 10.1 could allow a local user to change their job user at job submission time due to improper file permission settings. IBM X-Force ID: 147439...

CVE-2018-1706: Improper Neutralization of Input During Web Page Generation

IBM Spectrum Symphony 7.2.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 146341...

CVE-2018-1708: Exposure of Sensitive Information to an Unauthorized Actor

IBM Spectrum Symphony 7.1.2 and 7.2.0.2 could allow an authenticated user to obtain sensitive user information such as passwords through the WebUI. IBM X-Force ID: 146343...

PT-2018-13883

Name of the Vulnerable Software and Affected Versions IBM Spectrum Symphony versions 7.1.2 through 7.2.0.2 Description The issue allows an authenticated user to obtain sensitive user information, such as passwords, through the WebUI. Recommendations For versions 7.1.2 and 7.2.0.2, consider...

PT-2018-13870

Name of the Vulnerable Software and Affected Versions IBM Spectrum Symphony version 7.2.0.2 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted session...

PT-2018-13962

Name of the Vulnerable Software and Affected Versions IBM Spectrum LSF versions 9.1.1 through 9.1.3 IBM Spectrum LSF version 10.1 Description The issue allows a local user to change their job user at job submission time due to improper file permission settings. Recommendations For IBM Spectrum LS...

Security Bulletin: WebSphere Liberty ORB client vulnerability affects IBM Spectrum LSF Application Center

Summary WebSphere Liberty ORB client vulnerability affects IBM Spectrum LSF Application Center Vulnerability Details CVEID: CVE-2018-1683 DESCRIPTION: IBM WebSphere Application Server Liberty could allow a remote attacker to obtain sensitive information, caused by the failure to encrypt ORB...

CVE-2018-1723

IBM Spectrum Scale 4.1.1.0, 4.1.1.20, 4.2.0.0, 4.2.3.10, 5.0.0 and 5.0.1.2 could allow an unprivileged, authenticated user with access to a GPFS node to read arbitrary files available on this node. IBM X-Force ID: 147373...

CVE-2018-1723

IBM Spectrum Scale 4.1.1.0, 4.1.1.20, 4.2.0.0, 4.2.3.10, 5.0.0 and 5.0.1.2 could allow an unprivileged, authenticated user with access to a GPFS node to read arbitrary files available on this node. IBM X-Force ID: 147373...

CVE-2018-1783

IBM GPFS IBM Spectrum Scale 4.1.1.0, 4.1.1.20, 4.2.0.0, 4.2.3.10, 5.0.0 and 5.0.1.2 command line utility allows an unprivileged, authenticated user with access to a GPFS node to forcefully terminate GPFS and deny access to data available through GPFS. IBM X-Force ID: 148806...

Code injection

IBM Spectrum Scale 4.1.1.0, 4.1.1.20, 4.2.0.0, 4.2.3.10, 5.0.0 and 5.0.1.2 could allow an unprivileged, authenticated user with access to a GPFS node to read arbitrary files available on this node. IBM X-Force ID: 147373...

CVE-2018-1783

CVE-2018-1783 affects IBM GPFS/IBM Spectrum Scale components. The IBM bulletins describe that the GPFS command line utility lets an unprivileged, authenticated user with GPFS node access forcibly terminate GPFS and deny data access. Affected products include IBM Spectrum Scale and Db2/PureApplica...

CVE-2018-1723: Exposure of Sensitive Information to an Unauthorized Actor

IBM Spectrum Scale 4.1.1.0, 4.1.1.20, 4.2.0.0, 4.2.3.10, 5.0.0 and 5.0.1.2 could allow an unprivileged, authenticated user with access to a GPFS node to read arbitrary files available on this node. IBM X-Force ID: 147373...

CVE-2018-1783: Undefined Security Weakness

IBM GPFS IBM Spectrum Scale 4.1.1.0, 4.1.1.20, 4.2.0.0, 4.2.3.10, 5.0.0 and 5.0.1.2 command line utility allows an unprivileged, authenticated user with access to a GPFS node to forcefully terminate GPFS and deny access to data available through GPFS. IBM X-Force ID: 148806...

PT-2018-13956

Name of the Vulnerable Software and Affected Versions IBM Spectrum Scale versions 4.1.1.0 through 4.1.1.20 IBM Spectrum Scale versions 4.2.0.0 through 4.2.3.10 IBM Spectrum Scale versions 5.0.0 through 5.0.1.2 Description The issue allows an unprivileged, authenticated user with access to a GPFS...

Security Bulletin: A vulnerability has been identified in IBM Spectrum Scale that could allow a unprivileged, auntheticated user to read aribiratry file on node

Summary IBM Spectrum Scale could allow an unprivileged, authenticated user with access to a GPFS node to read arbitrary files available on this node. Vulnerability Details CVEID: CVE-2018-1723 DESCRIPTION: IBM Spectrum Scale could allow a GPFS command line utility allows an unprivileged,...

Security Bulletin: A vulnerability has been identified in IBM Spectrum Scale that could allow a unprivileged, auntheticated user to forcefully unterminate and deny access to data available through GPFS

Summary IBM Spectrum Scale could allow an unprivileged, authenticated user with access to a GPFS node to forcefully terminate GPFS and deny access to data available through GPFS. Vulnerability Details CVEID: CVE-2018-1783 DESCRIPTION: IBM GPFS command line utility allows an unprivileged,...

CVE-2018-1704

IBM Platform Symphony 7.1 Fix Pack 1 and 7.1.1 and IBM Spectrum Symphony 7.1.2 and 7.2.0.2 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to...

CVE-2018-1702: Improper Restriction of XML External Entity Reference

IBM Platform Symphony 7.1 Fix Pack 1 and 7.1.1 and IBM Spectrum Symphony 7.1.2 and 7.2.0.2 are vulnerable to a XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM...