CVE-2019-4715

IBM Spectrum Scale 4.2 and 5.0 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary commands on the system. IBM X-Force ID: 172093...

CVE-2019-4665

IBM Spectrum Scale 4.2 and 5.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 171247...

CVE-2019-4715

IBM Spectrum Scale 4.2 and 5.0 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary commands on the system. IBM X-Force ID: 172093...

CVE-2019-4665

IBM Spectrum Scale 4.2 and 5.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 171247...

Cross site scripting

IBM Spectrum Scale 4.2 and 5.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 171247...

Design/Logic Flaw

IBM Spectrum Scale 4.2 and 5.0 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary commands on the system. IBM X-Force ID: 172093...

CVE-2019-4715

IBM Spectrum Scale 4.2 and 5.0 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary commands on the system. IBM X-Force ID: 172093...

CVE-2019-4715

IBM Spectrum Scale versions 4.2.x (4.2.0.0–4.2.3.18) and 5.0.x (5.0.0.0–5.0.4.0) are affected by CVE-2019-4715, allowing remote authenticated attackers to execute arbitrary commands via a specially crafted request (notably when SMB is enabled). Remediation provided by IBM fixes: upgrade to 4.2.3....

CVE-2019-4665

IBM Spectrum Scale 4.2 and 5.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 171247...

CVE-2019-4665

IBM Spectrum Scale is affected by a cross-site scripting vulnerability in the Web UI (CVE-2019-4665). The IBM Security Bulletin summary states that versions 4.2.0.0–4.2.3.18 and 5.0.0.0–5.0.4.0 are vulnerable to injecting arbitrary JavaScript in the Web UI, potentially leading to credential discl...

IBM Spectrum Scale Input Validation Error Vulnerability

IBM Spectrum Scale is a scalable data and file management solution from IBM USA based on IBM GPFS, an enterprise file management system optimized for petabyte-scale storage management. The product supports helping clients reduce storage costs while improving security and management efficiency in...

IBM Spectrum Scale Cross-Site Scripting Vulnerability

IBM Spectrum Scale is a scalable data and file management solution from IBM USA based on IBM GPFS, an enterprise file management system optimized for petabyte-scale storage management. The product supports helping clients reduce storage costs while improving security and management efficiency in...

PT-2019-17149

Name of the Vulnerable Software and Affected Versions IBM Spectrum Scale versions 4.2 through 5.0 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, potentially altering the intended functionality and leading to credentials disclosure within a trusted session...

CVE-2019-4665: Improper Neutralization of Input During Web Page Generation

IBM Spectrum Scale 4.2 and 5.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 171247...

PT-2019-17150

Name of the Vulnerable Software and Affected Versions IBM Spectrum Scale versions 4.2 through 5.0 Description The issue allows a remote authenticated attacker to execute arbitrary commands on the system by sending a specially-crafted request. This enables the attacker to exploit the system and...

CVE-2019-4715: Improper Neutralization of Special Elements used in an OS Command

IBM Spectrum Scale 4.2 and 5.0 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary commands on the system. IBM X-Force ID: 172093...

Security Bulletin: A vulnerability in Samba affects IBM Spectrum Scale SMB protocol access method (CVE-2019-10197)

Summary A Samba vulnerability affects IBM Spectrum Scale SMB protocol access method that could allow a remote attacker to bypass security restrictions and gain access to the contents of directories outside of the share. Vulnerability Details In IBM Spectrum Scale by default wide links are forced ...

IBM Spectrum Scale Elevation of Privilege Vulnerability

IBM Spectrum Scale is a scalable data and file management solution from IBM USA based on IBM GPFS, an enterprise file management system optimized for petabyte-scale storage management. The product supports helping clients reduce storage costs while improving security and management efficiency in...

Security Bulletin: A security vulnerability has been identified in IBM® General Parallel File System and IBM Spectrum Scale shipped with IBM Smart Analytics System and IBM PureData System for Operational Analytics (CVE-2016-0263)

Summary IBM General Parallel File System or IBM Spectrum Scale is shipped as a component of IBM Smart Analytics System and IBM PureData System for Operational Analytics. Information about a security vulnerability affecting IBM General Parallel File System and IBM Spectrum Scale has been published...

CVE-2019-4558

A security vulnerability has been identified in all levels of IBM Spectrum Scale V5.0.0.0 through V5.0.3.2 and IBM Spectrum Scale V4.2.0.0 through V4.2.3.17 that could allow a local attacker to obtain root privilege by injecting parameters into setuid files...