CVE-2021-29667

According to IBM and NVD sources, CVE-2021-29667 affects IBM Spectrum Scale 5.0.0–5.0.5.6 and 5.1.0–5.1.0.2, with a CSV Injection vulnerability caused by improper validation of CSV contents that could let an attacker remotely execute arbitrary commands on a vulnerable system. The combined documen...

CVE-2021-29666

The IBM Spectrum Scale GUI/web UI is affected by CVE-2021-29666 (and related CVEs) with cross-site scripting in versions 5.0.0–5.0.5.6 and 5.1.0–5.1.0.2, potentially allowing arbitrary JavaScript execution and credential disclosure within a trusted session. Affected products include IBM Elastic S...

CVE-2021-29666

IBM Spectrum Scale 5.0.0 through 5.0.5.6 and 5.1.0 through 5.1.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted sessio...

CVE-2020-4981

Summary: CVE-2020-4981 affects IBM Spectrum Scale CSI. The vulnerability arises from an input validation error in Spectrum Scale versions 5.0.4.1–5.1.0.3, permitting a local privileged user to overwrite files. Impact: local privilege escalation with file overwrite capability; CVSS details in conn...

CVE-2020-4981

IBM Spectrum Scale 5.0.4.1 through 5.1.0.3 could allow a local privileged user to overwrite files due to improper input validation. IBM X-Force ID: 192541...

CVE-2021-29667: Improper Neutralization of Formula Elements in a CSV File

IBM Spectrum Scale 5.0.0 through 5.0.5.6 and 5.1.0 through 5.1.0.2 is potentially vulnerable to CSV Injection. A remote attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents. IBM X-Force ID: 199403...

PT-2021-18393

Name of the Vulnerable Software and Affected Versions IBM Spectrum Scale versions 5.0.0 through 5.0.5.6 IBM Spectrum Scale versions 5.1.0 through 5.1.0.2 Description The issue is related to CSV Injection, where improper validation of csv file contents could allow a remote attacker to execute...

PT-2021-12266

Name of the Vulnerable Software and Affected Versions IBM Spectrum Scale versions 5.0.4.1 through 5.1.0.3 Description The issue allows a local privileged user to overwrite files due to improper input validation. Recommendations For versions 5.0.4.1 through 5.1.0.3, update to a version outside of...

PT-2021-18392

Name of the Vulnerable Software and Affected Versions IBM Spectrum Scale versions 5.0.0 through 5.0.5.6 IBM Spectrum Scale versions 5.1.0 through 5.1.0.2 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leadin...

CVE-2021-29666: Improper Neutralization of Input During Web Page Generation

IBM Spectrum Scale 5.0.0 through 5.0.5.6 and 5.1.0 through 5.1.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted sessio...

CVE-2020-4981: Improper Input Validation

IBM Spectrum Scale 5.0.4.1 through 5.1.0.3 could allow a local privileged user to overwrite files due to improper input validation. IBM X-Force ID: 192541...

Security Bulletin: Multiple vulnerabilities affect the IBM Spectrum Scale GUI

Summary Vulnerabilities exist in all levels of IBM Spectrum Scale GUI. A fix for this vulnerability is available. Vulnerability Details CVEID: CVE-2021-29667 DESCRIPTION: IBM Spectrum Scale is potentially vulnerable to CSV Injection. A remote attacker could execute arbitrary commands on the syste...

Security Bulletin: A vulnerability in IBM Spectrum Scale CSI could allow insecure external command execution (CVE-2020-4981)

Summary A security vulnerability has been identified in all levels of IBM Spectrum Scale CSI that could allow insecure external command execution. A fix for this vulnerability is available. Vulnerability Details CVEID: CVE-2020-4981 DESCRIPTION: IBM Spectrum Scale could allow a local privileged...

CVE-2020-4981

IBM Spectrum Scale 5.0.4.1 through 5.1.0.3 could allow a local privileged user to overwrite files due to improper input validation. IBM X-Force ID: 192541...

CVE-2021-29666

IBM Spectrum Scale 5.0.0 through 5.0.5.6 and 5.1.0 through 5.1.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted sessio...

IBM Spectrum Scale 输入验证错误漏洞

IBM Spectrum Scale is a scalable data and file management solution from IBM USA based on IBM GPFS, an enterprise file management system optimized for petabyte-scale storage management. The product supports helping clients reduce storage costs while improving security and management efficiency in...

IBM Spectrum Scale 跨站脚本漏洞

IBM Spectrum Scale is a high-performance shared disk file management solution that gives you fast, reliable access to data from multiple servers. A cross-site scripting vulnerability exists in IBM Spectrum Scale versions 5.0.0 through 5.0.5.6 and 5.1.0 through 5.1.0.2. An attacker could exploit t...

IBM Spectrum Scale 代码代码注入漏洞

IBM Spectrum Scale is a scalable data and file management solution from IBM USA based on IBM GPFS, an enterprise file management system optimized for petabyte-scale storage management. The product supports helping clients reduce storage costs while improving security and management efficiency in...

CVE-2021-29667

IBM Spectrum Scale 5.0.0 through 5.0.5.6 and 5.1.0 through 5.1.0.2 is potentially vulnerable to CSV Injection. A remote attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents. IBM X-Force ID: 199403...

IBM Spectrum Scale File System Audit Log Record Bypass Vulnerability

IBM Spectrum Scale is a high-performance shared disk file management solution that gives you fast, reliable access to data from multiple servers. A file system audit logging bypass vulnerability exists in IBM Spectrum Scale version 5.1.0.1. A local attacker could exploit this vulnerability to...