Security Bulletin: IBM Spectrum Scale and IBM GPFS are affected by security vulnerabilities (CVE-2015-4974, CVE-2015-4981)

Summary Security vulnerabilities have been identified in the current levels of IBM Spectrum Scale V4.1.1, IBM GPFS V4.1 and V3.5: - could allow a local non privileged attacker to execute commands with root privileges CVE-2015-4974 - could allow a local non privileged attacker to read system...

Security Bulletin: A security vulnerability has been identified in IBM® GPFS shipped with IBM PureData System for Operational Analytics (CVE-2015-4974, CVE-2015-4981)

Summary IBM GPFS is shipped as a component of IBM PureData System for Operational Analytics. Information about a security vulnerability affecting IBM GPFS has been published in a security bulletin. Vulnerability Details Please consult the security bulletin Security Bulletin: IBM Spectrum Scale an...

Security Bulletin: IBM Spectrum Scale and IBM GPFS are affected by security vulnerabilities (CVE-2015-4974, CVE-2015-4981)

Summary Security vulnerabilities have been identified in the current levels of IBM Spectrum Scale V4.1.1, IBM GPFS V4.1 and V3.5: - could allow a local non privileged attacker to execute commands with root privileges CVE-2015-4974 - could allow a local non privileged attacker to read system...

Security Bulletin: IBM Virtualization Engine TS7700 Is Affected by IBM GPFS Security Vulnerabilities (CVE-2015-4974 CVE-2015-4981)

Summary Security vulnerabilities have been identified in the current levels of IBM GPFS as used by the TS7700: - could allow a local non privileged attacker to execute commands with root privileges CVE-2015-4974 - could allow a local non privileged attacker to read system memory contents...

Security Bulletin: GPFS security vulnerabilities in IBM Storwize V7000 Unified (CVE-2015-4974 and CVE-2015-4981)

Summary A fix is available for IBM Storwize V7000 Unified, for GPFS security vulnerabilities Vulnerability Details IBM General Parallel File System GPFS is a high-performance clustered file system. It is used in IBM Storwize V7000 Unified. CVEID: CVE-2015-4974 DESCRIPTION: IBM General Parallel Fi...

Security Bulletin:The GPFS pattern provided with IBM PureApplication System is affected by security vulnerabilities. (CVE-2015-4974 and CVE-2015-4981)

Summary Security vulnerabilities have been identified in the current levels of IBM Spectrum Scale V4.1.1, IBM GPFS V4.1 and V3.5: - could allow a local non privileged attacker to execute commands with root privileges CVE-2015-4974 - could allow a local non privileged attacker to read system...

CVE-2015-4974

CVE-2015-4974 affects IBM GPFS/Spectrum Scale: local attacker could execute commands with root privileges. A related issue, CVE-2015-4981, could allow reading system memory contents. Affected products include GPFS 3.5.x before 3.5.0.27, GPFS 4.1.x before 4.1.1.2, and Spectrum Scale 4.1.1.x before...