Security Bulletin: A Security Vulnerability has Been Identified in IBM Spectrum Scale v5.0.0 shipped with IBM Cloud PowerVC Manager for Software Defined Infrastructure (SDI) v1.1.0 (CVE-2017-1654)

Summary IBM Spectrum Scale v5.0.0 is shipped with IBM Cloud PowerVC Manager for Software Defined Infrastructure SDI v1.1.0. Information about a security vulnerability affecting IBM Spectrum Scale v5.0.0 has been published in a security bulletin. Vulnerability Details Refer to the security bulleti...

Security Bulletin: Security vulnerability has been identified in IBM Spectrum Scale which is used by IBM PureApplication Systems/Service (CVE-2017-1654)

Summary A security vulnerability has been identified in IBM Spectrum Scale that could allow a local user access to other users data in dump files. Vulnerability Details CVEID: CVE-2017-1654 DESCRIPTION: IBM Spectrum Scale 4.1.1, 4.2.0, 4.2.1, 4.2.2, 4.2.3, and 5.0.0 could allow a local unprivileg...

CVE-2017-1654

This CVE (CVE-2017-1654) affects IBM Spectrum Scale: affected versions include 4.1.1, 4.2.0–4.2.3 and 5.0.0, where a local unprivileged user could access information stored in dump/trace files. The IBM bulletins describe that dump contents, including user data, could be written to recovery logs o...