Security Bulletin: IBM Spectrum LSF is affected by a privilege escalation vulnerability

Summary IBM Spectrum LSF has addressed the following vulnerability. Enhancing the eauth executable file to prevent the preloading of getuid to avoid the users changing their job user at job submission time. Vulnerability Details CVEID:CVE-2018-1724 DESCRIPTION:IBM Spectrum LSF 9.1.1 9.1.2, 9.1.3,...

CVE-2018-1724

IBM Spectrum LSF 9.1.1 9.1.2, 9.1.3, and 10.1 could allow a local user to change their job user at job submission time due to improper file permission settings. IBM X-Force ID: 147439...

Design/Logic Flaw

IBM Spectrum LSF 9.1.1 9.1.2, 9.1.3, and 10.1 could allow a local user to change their job user at job submission time due to improper file permission settings. IBM X-Force ID: 147439...

PT-2018-13962

Name of the Vulnerable Software and Affected Versions IBM Spectrum LSF versions 9.1.1 through 9.1.3 IBM Spectrum LSF version 10.1 Description The issue allows a local user to change their job user at job submission time due to improper file permission settings. Recommendations For IBM Spectrum LS...