138 matches found
Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Spectrum LSF Analytics
Summary There are multiple vulnerabilities in IBM®Runtime Environment Java™Version 7 used by IBM Spectrum LSF Analytics. These issues were disclosed as part of the IBM Java SDK updates in April 2018 Vulnerability Details If you run your own Java code using the IBM Java Runtime delivered with this...
Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Spectrum LSF Analytics
Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 7 used by IBM Spectrum LSF Analytics. These issues were disclosed as part of the IBM Java SDK updates in January 2018. Vulnerability Details If you run your own Java code using the IBM Java Runtime delivered with...
Security Bulletin: Public disclosed vulnerability from Apache Commons affects IBM Spectrum LSF Explorer.
Summary Public disclosed vulnerability CVE-2018-1324 from Apache Commons affects IBM Spectrum LSF Explorer. Vulnerability Details CVE Descriptions CVEID: CVE-2018-1324 DESCRIPTION: A specially crafted ZIP archive can be used to cause an infinite loop inside of Apache Commons Compress' extra field...
Security Bulletin: Public disclosed vulnerability from Apache Struts affects IBM Spectrum LSF Explorer
Summary Public disclosed vulnerability from Apache Struts affects IBM Spectrum LSF Explorer. Vulnerability Details CVEID: CVE-2018-1327 DESCRIPTION: Apache Struts is vulnerable to a denial of service. By sending a specially crafted XML request using the XStream handler with the Struts REST plugin...
Security Bulletin: Open Source Apache CXF Vulnerabilities affects IBM Spectrum LSF Explorer
Summary Open Source Apache CXF Vulnerabilities affects IBM Spectrum LSF Explorer. Vulnerability Details CVEID: CVE-2017-12624 DESCRIPTION: Apache CXF is vulnerable to a denial of service. By using a specially crafted message attachment header, a remote attacker could exploit this vulnerability to...
Security Bulletin: Privilege Escalation / User Impersonation affects IBM Platform LSF and IBM Spectrum LSF
Summary This is to address security vulnerabilities in IBM Spectrum LSF and IBM Platform LSF Load Sharing Facility that could allow a local attacker to impersonate arbitrary users to submit jobs to LSF, and possibly run LSF jobs as root. LSF uses an external authentication framework to secure use...
Security Bulletin: Open Source Cacti vulnerability affects IBM Platform RTM (CVE-2016-3172, CVE-2016-3659)
Summary Cacti is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements to the tree.php script using the parentid parameter, which could allow the attacker to view, add, modify or delete information in the back-end database. A remote attacker could send...
IBM Spectrum LSF Privilege Escalation Vulnerability
A vulnerability was identified within IBM Spectrum LSF which made it was possible to impersonate other users when submitting jobs for execution. Additionally, it was found to be possible to impersonate and execute jobs as root, even where root job submission is disabled. Versions affected include...
CVE-2017-1205
IBM Platform LSF 10.1 contains an unspecified vulnerability that could allow a local user to escalate their privileges and obtain root access. IBM X-Force ID: 123741...
Design/Logic Flaw
IBM Platform LSF 10.1 contains an unspecified vulnerability that could allow a local user to escalate their privileges and obtain root access. IBM X-Force ID: 123741...
CVE-2017-1205
IBM Platform LSF and IBM Spectrum LSF have a local privilege-escalation vulnerability (CVE-2017-1205) affecting versions 8.3, 9.1.1–9.1.3, 10.1, and 10.1.0.1. The IBM Security Bulletin notes an unspecified flaw that could allow a local user to impersonate other users and possibly run jobs as root...
CVE-2017-1205
IBM Platform LSF 10.1 contains an unspecified vulnerability that could allow a local user to escalate their privileges and obtain root access. IBM X-Force ID: 123741...
CVE-2004-0318
Load Sharing Facility LSF 4.x, 5.x, and 6.x uses the LSFEAUTHUID environment variable, if it exists, instead of the real UID of the user, which could allow remote attackers within the local cluster to gain privileges...
CVE-2004-0318
CVE-2004-0318 affects Load Sharing Facility (LSF) versions 4.x, 5.x, and 6.x. The vulnerability arises because LSF_EAUTH_UID may be used in place of the real user UID, enabling remote attackers within the local cluster to gain privileges. The underlying issue is the handling of an environment var...
CVE-2004-0317
CVE-2004-0317 affects Load Sharing Facility (LSF) versions 4.x, 5.x, and 6.x. The vulnerability is a buffer overflow in the eauth component triggered by a long LSF_From_PC parameter, allowing local users or attackers within an LSF cluster to cause a denial of service (segmentation fault) and pote...
Lam3rZ Security Advisory #2/2004: LSF eauth vulnerability leads to a possibility of controlling cluster jobs on behalf of other users
Lam3rZ Security Advisory 2/2004 23 Feb 2004 Remote within a cluster root in LSF Name: Load Sharing Facility versions 4.x, 5.x, 6.x Severity: High Vendor URL: http://www.platform.com Author: Tomasz Grabowski [email protected] Vendor notified: 29 Oct 2003 Vendor confirmed: 30 Oct 2003 Vendor...
CVE-2003-0337
The CVE describes a local code execution in Load Sharing Facility (LSF) 5.1 via the ckconfig command in lsadmin. By manipulating environment variables LSF_ENVDIR to reference an alternate lsf.conf and LSF_SERVERDIR to point to a malicious lim program, a local attacker can cause lsadmin to execute...