CVE-2021-29740

IBM Spectrum Scale 5.0.0 through 5.0.5.6 and 5.1.0 through 5.1.0.3 system core component is affected by a format string security vulnerability. An attacker could execute arbitrary code in the context of process memory, potentially escalating their system privileges and taking control over the...

Format string

IBM Spectrum Scale 5.0.0 through 5.0.5.6 and 5.1.0 through 5.1.0.3 system core component is affected by a format string security vulnerability. An attacker could execute arbitrary code in the context of process memory, potentially escalating their system privileges and taking control over the...

CVE-2021-3412

It was found that all versions of 3Scale developer portal lacked brute force protections. An attacker could use this gap to bypass login controls, and access privileged information, or possibly conduct further attacks...

CVE-2021-29740

IBM Spectrum Scale 5.0.0 through 5.0.5.6 and 5.1.0 through 5.1.0.3 system core component is affected by a format string security vulnerability. An attacker could execute arbitrary code in the context of process memory, potentially escalating their system privileges and taking control over the...

CVE-2021-29740

CVE-2021-29740 affects IBM Spectrum Scale (5.0.0–5.0.5.6 and 5.1.0–5.1.0.3) and IBM Elastic Storage System variants, due to a format-string vulnerability in the system core component that could allow arbitrary code execution with root privileges. Remediation is to upgrade to recommended fixed lev...

Unspecified Vulnerability in IBM WebSphere Exteme Scale

IBM WebSphere Exteme Scale is a resilient, highly scalable in-memory data grid from IBM USA. It can provide predictable responsiveness to meet exponential demands on data. A security vulnerability exists in IBM WebSphere Exteme Scale Liberty, which can be exploited by a remote attacker to obtain...

IBM WebSphere Exteme Scale Cross-Site Scripting Vulnerability (CNVD-2021-39671)

IBM WebSphere Exteme Scale is a resilient, highly scalable in-memory data grid from IBM USA. It can provide predictable responsiveness to meet exponential demands on data. IBM WebSphere Exteme Scale Liberty suffers from a cross-site scripting vulnerability that allows a user to embed arbitrary...

3Scale 安全漏洞

Red Hat 3Scale is a suite of API Application Programming Interface lifecycle management software from Red Hat. A security vulnerability exists in 3Scale, which originated in 3Scale.We found that all versions of the 3Scale Developer Portal lack brute force protection...

IBM WebSphere Exteme Scale Cross-Site Scripting Vulnerability

IBM WebSphere Exteme Scale is a resilient, highly scalable in-memory data grid from IBM USA. It can provide predictable responsiveness to meet exponential demands on data. A cross-site scripting vulnerability exists in IBM WebSphere Exteme Scale Liberty, which stems from a lack of proper validati...

New sophisticated email-based attack from NOBELIUM

Microsoft Threat Intelligence Center MSTIC has uncovered a wide-scale malicious email campaign operated by NOBELIUM, the threat actor behind the attacks against SolarWinds, the SUNBURST backdoor, TEARDROP malware, GoldMax malware, and other related components. The campaign, initially observed and...

IBM WebSphere Exteme Scale 跨站脚本漏洞

IBM WebSphere Exteme Scale is a resilient, highly scalable in-memory data grid from IBM USA. It can provide predictable responsiveness to meet exponential demands on data. IBM WebSphere Exteme Scale Liberty suffers from a cross-site scripting vulnerability that allows a user to embed arbitrary...

IBM WebSphere Exteme Scale 跨站脚本漏洞

IBM WebSphere Exteme Scale is a resilient, highly scalable in-memory data grid from IBM USA. It can provide predictable responsiveness to meet exponential demands on data. A cross-site scripting vulnerability exists in IBM WebSphere Exteme Scale Liberty, which stems from a lack of proper validati...

IBM WebSphere eXtreme Scale 安全漏洞

IBM WebSphere Exteme Scale is a resilient, highly scalable in-memory data grid from IBM USA. It can provide predictable responsiveness to meet exponential demands on data. A security vulnerability exists in IBM WebSphere eXtreme Scale Liberty Deployment XSLD, which can be exploited by a remote...

IBM WebSphere Exteme Scale 安全漏洞

IBM WebSphere Exteme Scale is a resilient, highly scalable in-memory data grid from IBM USA. It can provide predictable responsiveness to meet exponential demands on data. A security vulnerability exists in IBM WebSphere Exteme Scale Liberty, which can be exploited by a remote attacker to obtain...

CVE-2021-29708

IBM Spectrum Scale 5.1.0.1 could allow a local with access to the GUI pod container to obtain sensitive cryptographic keys that could allow them to elevate their privileges. IBM X-Force ID: 200883...

CVE-2021-29708

IBM Spectrum Scale 5.1.0.1 could allow a local with access to the GUI pod container to obtain sensitive cryptographic keys that could allow them to elevate their privileges. IBM X-Force ID: 200883...

Code injection

IBM Spectrum Scale 5.1.0.1 could allow a local with access to the GUI pod container to obtain sensitive cryptographic keys that could allow them to elevate their privileges. IBM X-Force ID: 200883...

CVE-2021-29708

IBM Spectrum Scale 5.1.0.1 could allow a local with access to the GUI pod container to obtain sensitive cryptographic keys that could allow them to elevate their privileges. IBM X-Force ID: 200883...

CVE-2021-29708

CVE-2021-29708 affects IBM Spectrum Scale CNSA 5.1.0.1. A local attacker with access to the GUI pod container could obtain sensitive cryptographic keys, enabling privilege elevation to a privileged core-pod user. The IBM bulletin confirms the vulnerability and provides a fix: upgrade to Spectrum ...

IBM Spectrum Scale elevation of privilege vulnerability (CNVD-2021-37142)

IBM Spectrum Scale is a scalable data and file management solution from IBM USA based on IBM GPFS, an enterprise file management system optimized for petabyte-scale storage management. The product supports helping clients reduce storage costs while improving security and management efficiency in...