CVE-2022-41739

IBM Spectrum Scale Container Native Storage Access versions 5.1.2.1–5.1.6.0 allow a program inside a container to bypass isolation and gain host access or capabilities, potentially exposing confidential information on the host. Remediation: upgrade to 5.1.7.0+ (and OpenShift 4.11+). If running

CVE-2022-41739 IBM Spectrum Scale privilege escalation

IBM Spectrum Scale IBM Spectrum Scale Container Native Storage Access 5.1.2.1 through 5.1.6.0 could allow programs running inside the container to overcome isolation mechanism and gain additional capabilities or access sensitive information on the host. IBM X-Force ID: 237815...

IBM Spectrum Scale 安全漏洞

IBM Spectrum Scale is a suite of scalable data and file management solutions from International Business Machines IBM based on IBM GPFS, an enterprise file management system optimized for petabyte-scale storage management. The product supports helping customers reduce storage costs while improvin...

PT-2023-14027 · Ibm · Ibm Spectrum Scale

Name of the Vulnerable Software and Affected Versions: IBM Spectrum Scale versions 5.1.2.1 through 5.1.6.0 Description: The issue allows programs running inside the container to overcome the isolation mechanism, potentially gaining additional capabilities or accessing sensitive information on the...

CVE-2022-41739: Undefined Security Weakness

IBM Spectrum Scale IBM Spectrum Scale Container Native Storage Access 5.1.2.1 through 5.1.6.0 could allow programs running inside the container to overcome isolation mechanism and gain additional capabilities or access sensitive information on the host. IBM X-Force ID: 237815...

Security Bulletin: A vulnerability has been identified in the IBM Spectrum Scale GUI where a remote authenticated user can execute commands [CVE-2022-45047]

Summary A security vulnerability has been identified in all levels of IBM Spectrum Scale GUI that could allow a remote authenticated user to execute commands. A fix for this vulnerability is available. Vulnerability Details CVEID:CVE-2022-45047 DESCRIPTION: Apache MINA SSHD could allow a remote...

Security Bulletin: A vulnerability in IBM Spectrum Scale Container Native that could allow access to confidential information on the host

Summary A security vulnerability has been identified in IBM Spectrum Scale Container Native that could allow access to confidential information on the host. A fix for this vulnerability is available. Vulnerability Details CVEID:CVE-2022-41739 DESCRIPTION: IBM Spectrum Scale could allow programs...

Security Bulletin: A vulnerability has been identified in IBM Spectrum Scale GUI where remote authenticated attacker can execute an arbitrary code on the system (CVE-2022-1471)

Summary A security vulnerability has been identified in all levels of IBM Spectrum Scale GUI where remote authenticated attacker can execute an arbitrary code on the system . A fix for this vulnerability is available. Vulnerability Details CVEID:CVE-2022-1471 DESCRIPTION: SnakeYaml could allow a...

Security Bulletin: A vulnerability in IBM Spectrum Scale Container Native that could allow an attacker acquiring root privileges on the host (CVE-2022-41736)

Summary A security vulnerability has been identified in IBM Spectrum Scale Container Native that could allow an attacker to acquire root privileges on the host using unshare. A fix for this vulnerability is available. Vulnerability Details CVEID:CVE-2022-41736 DESCRIPTION: IBM Spectrum Scale...

Security Bulletin: Vulnerability in Samba affects Spectrum Scale shipped with Cloud Pak System [CVE-2021-44142]

Summary Vulnerability in Samba affects Spectrum Scale shipped with Cloud Pak System. IBM Cloud Pak System has addressed this vulnerability. CVE-2021-44142 Vulnerability Details CVEID:CVE-2021-44142 DESCRIPTION: Samba could allow a remote authenticated attacker to execute arbitrary code on the...

Security Bulletin: A vulnerability has been identified in IBM Spectrum Scale Data Access Services (DAS) which can cause denial of service.

Summary A security vulnerability has been identified in IBM Spectrum Scale Data Access Services DAS where Golang Go is vulnerable to denial of service. A fix for this vulnerability is available. Vulnerability Details CVEID:CVE-2022-41717 DESCRIPTION: Golang Go is vulnerable to a denial of service...

CVE-2020-4927

A vulnerability in the Spectrum Scale 5.0.5.0 through 5.1.6.1 core component could allow unauthorized access to user data or injection of arbitrary data in the communication protocol. IBM X-Force ID: 191695...

CVE-2020-4927

A vulnerability in the Spectrum Scale 5.0.5.0 through 5.1.6.1 core component could allow unauthorized access to user data or injection of arbitrary data in the communication protocol. IBM X-Force ID: 191695...

CVE-2020-4927 IBM Spectrum Scale information disclosure

A vulnerability in the Spectrum Scale 5.0.5.0 through 5.1.6.1 core component could allow unauthorized access to user data or injection of arbitrary data in the communication protocol. IBM X-Force ID: 191695...

CVE-2020-4927

IBM Spectrum Scale (core component) versions 5.0.5.0–5.1.6.1 contain a vulnerability that could allow unauthorized access to user data or injection of arbitrary data in the communication protocol. Impact is limited to affected file-system-hosting clusters. Remediation per IBM bulletin: upgrade to...

CVE-2020-4927 IBM Spectrum Scale information disclosure

A vulnerability in the Spectrum Scale 5.0.5.0 through 5.1.6.1 core component could allow unauthorized access to user data or injection of arbitrary data in the communication protocol. IBM X-Force ID: 191695...

PT-2023-11911

Name of the Vulnerable Software and Affected Versions Spectrum Scale versions 5.0.5.0 through 5.1.6.1 Description A vulnerability in the core component could allow unauthorized access to user data or injection of arbitrary data in the communication protocol. Recommendations For versions 5.0.5.0...

IBM Spectrum Scale 信息泄露漏洞

IBM Spectrum Scale is a suite of scalable data and file management solutions from International Business Machines IBM based on IBM GPFS, an enterprise file management system optimized for petabyte-scale storage management. The product supports helping customers reduce storage costs while improvin...

CVE-2020-4927: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability in the Spectrum Scale 5.0.5.0 through 5.1.6.1 core component could allow unauthorized access to user data or injection of arbitrary data in the communication protocol. IBM X-Force ID: 191695...

Security Bulletin: A vulnerability has been identified in IBM Spectrum Scale which could allow unauthorized access to user data or injection of arbitrary data in the communication protocol (CVE-2020-4927)

Summary A security vulnerability has been identified in all levels of IBM Spectrum Scale which could allow unauthorized access to user data or injection of arbitrary data in the communication protocol . This vulnerability only affects Spectrum Scale clusters that host file systems. Clusters that...