The vulnerability of the file system component of the IBM Spectrum Scale data storage management software allows a attacker to trigger a service failure.

The vulnerability of the file system component of the IBM Spectrum Scale data storage management software is related to insufficient testing of unusual or exceptional states. Exploiting this vulnerability could allow a malicious actor to trigger a service failure by executing processes like...

Digital Offense Capabilities Are Currently Net Negative for the Security Ecosystem

Proposition Digital offense capabilities are currently net negative for the security ecosystem.0 The costs of improved digital offense currently outweigh the benefits. The legitimate benefits of digital offense accrue primarily to the security one percent securityonepercent, and to intelligence,...

IBM API Connect 资源管理错误漏洞

BM Spectrum Scale is a scalable data and file management solution from IBM USA based on IBM GPFS, an enterprise file management system optimized for petabyte-scale storage management. The product supports helping customers reduce storage costs while improving security and management efficiency in...

European Authorities Disrupt Emotet — World's Most Dangerous Malware

Law enforcement agencies from as many as eight countries dismantled the infrastructure of Emotet, a notorious email-based Windows malware behind several botnet-driven spam campaigns and ransomware attacks over the past decade. The coordinated takedown of the botnet on Tuesday — dubbed "Operation...

International Action Targets Emotet Crimeware

Authorities across Europe on Tuesday said theyd seized control over Emotet, a prolific malware strain and cybercrime-as-service operation. Investigators say the action could help quarantine more than a million Microsoft Windows systems currently compromised with malware tied to Emotet infections...

IBM Spectrum Scale Log Poisoning Vulnerability

IBM Spectrum Scale is a high-performance shared disk file management solution that gives you fast, reliable access to data from multiple servers. A log casting vulnerability exists in IBM Spectrum Scale 5.0.0 - 5.0.5.4, 5.1.0. A local user can exploit this vulnerability to impact support and...

CVE-2020-4889

IBM Spectrum Scale 5.0.0 through 5.0.5.4 and 5.1.0 could allow a local user to poison log files which could impact support and development efforts. IBM X-Force ID: 190971...

CVE-2020-4889

IBM Spectrum Scale 5.0.0 through 5.0.5.4 and 5.1.0 could allow a local user to poison log files which could impact support and development efforts. IBM X-Force ID: 190971...

Code injection

IBM Spectrum Scale 5.0.0 through 5.0.5.4 and 5.1.0 could allow a local user to poison log files which could impact support and development efforts. IBM X-Force ID: 190971...

CVE-2020-4889

IBM Spectrum Scale 5.0.0 through 5.0.5.4 and 5.1.0 could allow a local user to poison log files which could impact support and development efforts. IBM X-Force ID: 190971...

CVE-2020-4889

IBM Spectrum Scale is affected by CVE-2020-4889. A local attacker could poison command log files via the log-casting vulnerability in IBM Spectrum Scale 5.0.0–5.0.5.4 and 5.1.0, per IBM’s security bulletin. Impact is described as enabling log poisoning that could affect support and development ef...

IBM Spectrum Scale 安全漏洞

IBM Spectrum Scale is a high-performance shared disk file management solution that gives you fast, reliable access to data from multiple servers. A log casting vulnerability exists in IBM Spectrum Scale 5.0.0 - 5.0.5.4, 5.1.0. A local user can exploit this vulnerability to impact support and...

Security Bulletin: A vulnerability in IBM Spectrum Scale allows to inject malicious content into command log files (CVE-2020-4889)

Summary A security vulnerability has been identified in all levels of IBM Spectrum Scale FAL that could allow a local attacker to inject malicious content into command log files. A fix for this vulnerability is available. Vulnerability Details CVEID: CVE-2020-4889 DESCRIPTION: IBM Spectrum Scale...

Security Bulletin: Multiple vulnerabilities in samba affect IBM Spectrum Scale SMB protocol access method.

Summary Multiple samba vulnerabilities affect IBM Spectrum Scale SMB protocol access method that could cause denial of service. A fix for these vulnerabilities is available. Vulnerability Details CVEID: CVE-2020-14318 DESCRIPTION: Samba could allow a remote authenticated attacker to obtain...

CVE-2020-4889

IBM Spectrum Scale 5.0.0 through 5.0.5.4 and 5.1.0 could allow a local user to poison log files which could impact support and development efforts. IBM X-Force ID: 190971...

Security Bulletin: A vulnerability has been identified in Apache HttpClient shipped with IBM Spectrum Scale Transparent Cloud Tiering (CVE-2020-13956)

Summary Apache HttpClient is a component shipped with IBM Spectrum Scale Transparent Cloud Tiering. Information about security vulnerabilities affecting Apache HttpClient has been published. CVE-2020-13956 Vulnerability Details CVEID: CVE-2020-13956 DESCRIPTION: Apache HttpClient could allow a...

Security Bulletin: Multiple vulnerabilities in the IBM Java Runtime affect IBM Spectrum Scale Transparent Cloud Tiering (CVE-2020-14577, CVE-2020-14578, CVE-2020-14579)

Summary There are vulnerabilities in the IBM® Runtime Environment Java™ Version 8, which is used by BM Spectrum Scale Transparent Cloud Tiering . These issues were disclosed as part of the IBM SDK, Java Technology Edition Quarterly CPU - Jul 2020 - Includes Oracle Jul 2020 CPU plus one additional...

IBM WebSphere eXtreme Scale 8.6.1 < 8.6.1.4 (6397682)

The version of IBM WebSphere eXtreme Scale installed on the remote host is prior to 8.6.1.4. It is, therefore, affected by a vulnerability as referenced in the 6397682 advisory. - IBM WebSphere eXtreme Scale 8.6.1 stores sensitive information in URL parameters. This may lead to information...

IBM WebSphere eXtreme Scale (Linux)

Binary data ibmwebsphereextremescalenixinstalled.nbin...

CVE-2020-4336

IBM WebSphere eXtreme Scale 8.6.1 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 177932...