IBM Spectrum Scale and General Parallel File System Denial of Service Vulnerability

IBM Spectrum Scale and General Parallel File System GPFS are both products of IBM Corporation of the U.S.A. IBM GPFS is an enterprise file management system optimized for petabyte-scale storage management.IBM Spectrum Scale is a set of data and file management solutions based on IBM GPFS. IBM...

IBM Spectrum Scale (GPFS) Hadoop Connector Vulnerable

IBM Spectrum Scale and General Parallel File System GPFS is a scalable data and file management solution based on IBM GPFS an enterprise file management system optimized for petabyte-scale storage management from IBM, USA. The solution helps customers reduce storage costs while improving security...

CVE-2015-7430

The Hadoop connector 1.1.1, 2.4, 2.5, and 2.7.0-0 before 2.7.0-3 for IBM Spectrum Scale and General Parallel File System GPFS allows local users to read or write to arbitrary GPFS data via unspecified vectors...

CVE-2015-7430

The Hadoop connector 1.1.1, 2.4, 2.5, and 2.7.0-0 before 2.7.0-3 for IBM Spectrum Scale and General Parallel File System GPFS allows local users to read or write to arbitrary GPFS data via unspecified vectors...

CVE-2015-7430

The IBM Spectrum Scale (GPFS) Hadoop Connector is affected by CVE-2015-7430, impacting versions 1.1.1, 2.4, 2.5, and 2.7.0-0 through 2.7.0-2. An unprivileged user could read, write, modify, or delete GPFS data via unspecified vectors. The issue is mitigated by upgrading to version 2.7.0-3. IBM pr...

CVE-2015-7403: Undefined Security Weakness

IBM Spectrum Scale 4.1.1.x before 4.1.1.3 and General Parallel File System GPFS 3.5.x before 3.5.0.29 and 4.1.x through 4.1.0.8 on AIX allow local users to cause a denial of service incorrect pointer dereference and node crash via unspecified vectors...

PT-2016-3759

Name of the Vulnerable Software and Affected Versions IBM Spectrum Scale versions 4.1.1.x before 4.1.1.3 General Parallel File System GPFS versions 3.5.x before 3.5.0.29 General Parallel File System GPFS versions 4.1.x through 4.1.0.8 Description The issue allows local users to cause a denial of...

IBM Spectrum Scale General Parallel File System Privilege Escalation

The vulnerability of the IBM Spectrum Scale data management program and the General Parallel File System file system is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability can allow a local attacker to gain root user privileges when executing commands...

IBM Spectrum Scale data

The vulnerability of the IBM Spectrum Scale storage management program and the General Parallel File System file system is related to the lack of protection for operational data. Exploiting this vulnerability can allow an attacker, operating locally, to gain access to protected information in the...

IBM General Parallel File System and Spectrum Scale Operating System Command Injection Vulnerability

IBM General Parallel File System GPFS and Spectrum Scale are both products of IBM USA. The former is a scalable, highly available, high-performance enterprise file management system optimized for petabyte-scale storage management. The latter is a set of software-defined Spectrum storage solutions...

CVE-2015-4974

IBM General Parallel File System GPFS 3.5.x before 3.5.0.27 and 4.1.x before 4.1.1.2 and Spectrum Scale 4.1.1.x before 4.1.1.2 allow local users to obtain root privileges for command execution via unspecified vectors...

CVE-2015-4974: Improper Neutralization of Special Elements used in a Command

IBM General Parallel File System GPFS 3.5.x before 3.5.0.27 and 4.1.x before 4.1.1.2 and Spectrum Scale 4.1.1.x before 4.1.1.2 allow local users to obtain root privileges for command execution via unspecified vectors...

PT-2015-2601

Name of the Vulnerable Software and Affected Versions IBM General Parallel File System GPFS versions 3.5.x through 3.5.0.27 IBM General Parallel File System GPFS versions 4.1.x through 4.1.1.2 IBM Spectrum Scale versions 4.1.1.x through 4.1.1.2 Description The issue is related to the lack of inpu...

PT-2015-2600

Name of the Vulnerable Software and Affected Versions IBM General Parallel File System GPFS versions 3.5.x through 3.5.0.26 IBM General Parallel File System GPFS versions 4.1.x through 4.1.1.1 IBM Spectrum Scale versions 4.1.1.x through 4.1.1.1 Description The issue is related to the lack of...

CVE-2015-4981: Exposure of Sensitive Information to an Unauthorized Actor

IBM General Parallel File System GPFS 3.5.x before 3.5.0.27 and 4.1.x before 4.1.1.2 and Spectrum Scale 4.1.1.x before 4.1.1.2 allow local users to obtain sensitive information from system memory via unspecified vectors...

IBM DB2 10.5 < Fix Pack 6 Multiple Vulnerabilities (Bar Mitzvah)

According to its version, the installation of IBM DB2 10.5 running on the remote host is prior to Fix Pack 6. It is, therefore, affected by the following vulnerabilities : - A flaw exists in the IBM Global Security Kit GSKit when handling RSA temporary keys in a non-export RSA key exchange...

IBM DB2 10.5 <= Fix Pack 5 Multiple Vulnerabilities

According to its version, the installation of IBM DB2 running on the remote host is version 10.5 prior or equal to Fix Pack 5. It is, therefore, affected by one or more of the following vulnerabilities : - An unspecified error exists during the handling of SELECT statements with XML/XSLT function...

IBM General Parallel File System Information Disclosure Vulnerability

IBM General Parallel File System GPFS is a scalable, highly available, high-performance enterprise file management system optimized for petabyte-scale storage management from IBM in the United States. A security vulnerability exists in the /usr/lpp/mmfs/bin/gpfs.snap file in IBM GPFS version 4.1....

CVE-2015-1890: Exposure of Sensitive Information to an Unauthorized Actor

/usr/lpp/mmfs/bin/gpfs.snap in IBM General Parallel File System GPFS 4.1 before 4.1.0.7 produces an archive potentially containing cleartext keys, and lacks a warning about reviewing this archive to detect included keys, which might allow remote attackers to obtain sensitive information by...

PT-2015-5489

Name of the Vulnerable Software and Affected Versions IBM General Parallel File System GPFS versions 4.1 through 4.1.0.6 Description The issue in IBM General Parallel File System GPFS allows remote attackers to obtain sensitive information by leveraging access to a technical-support data stream...