2403 matches found
Cross site scripting
IBM Spectrum Scale 5.0.0 through 5.0.5.6 and 5.1.0 through 5.1.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted sessio...
Input validation
IBM Spectrum Scale 5.0.0 through 5.0.5.6 and 5.1.0 through 5.1.0.2 is potentially vulnerable to CSV Injection. A remote attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents. IBM X-Force ID: 199403...
Input validation
IBM Spectrum Scale 5.0.4.1 through 5.1.0.3 could allow a local privileged user to overwrite files due to improper input validation. IBM X-Force ID: 192541...
CVE-2021-29667
According to IBM and NVD sources, CVE-2021-29667 affects IBM Spectrum Scale 5.0.0–5.0.5.6 and 5.1.0–5.1.0.2, with a CSV Injection vulnerability caused by improper validation of CSV contents that could let an attacker remotely execute arbitrary commands on a vulnerable system. The combined documen...
CVE-2021-29667
IBM Spectrum Scale 5.0.0 through 5.0.5.6 and 5.1.0 through 5.1.0.2 is potentially vulnerable to CSV Injection. A remote attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents. IBM X-Force ID: 199403...
CVE-2021-29666
The IBM Spectrum Scale GUI/web UI is affected by CVE-2021-29666 (and related CVEs) with cross-site scripting in versions 5.0.0–5.0.5.6 and 5.1.0–5.1.0.2, potentially allowing arbitrary JavaScript execution and credential disclosure within a trusted session. Affected products include IBM Elastic S...
CVE-2021-29666
IBM Spectrum Scale 5.0.0 through 5.0.5.6 and 5.1.0 through 5.1.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted sessio...
CVE-2020-4981
Summary: CVE-2020-4981 affects IBM Spectrum Scale CSI. The vulnerability arises from an input validation error in Spectrum Scale versions 5.0.4.1–5.1.0.3, permitting a local privileged user to overwrite files. Impact: local privilege escalation with file overwrite capability; CVSS details in conn...
CVE-2020-4981
IBM Spectrum Scale 5.0.4.1 through 5.1.0.3 could allow a local privileged user to overwrite files due to improper input validation. IBM X-Force ID: 192541...
PT-2021-18392
Name of the Vulnerable Software and Affected Versions IBM Spectrum Scale versions 5.0.0 through 5.0.5.6 IBM Spectrum Scale versions 5.1.0 through 5.1.0.2 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leadin...
PT-2021-18393
Name of the Vulnerable Software and Affected Versions IBM Spectrum Scale versions 5.0.0 through 5.0.5.6 IBM Spectrum Scale versions 5.1.0 through 5.1.0.2 Description The issue is related to CSV Injection, where improper validation of csv file contents could allow a remote attacker to execute...
CVE-2021-29666: Improper Neutralization of Input During Web Page Generation
IBM Spectrum Scale 5.0.0 through 5.0.5.6 and 5.1.0 through 5.1.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted sessio...
CVE-2020-4981: Improper Input Validation
IBM Spectrum Scale 5.0.4.1 through 5.1.0.3 could allow a local privileged user to overwrite files due to improper input validation. IBM X-Force ID: 192541...
CVE-2021-29667: Improper Neutralization of Formula Elements in a CSV File
IBM Spectrum Scale 5.0.0 through 5.0.5.6 and 5.1.0 through 5.1.0.2 is potentially vulnerable to CSV Injection. A remote attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents. IBM X-Force ID: 199403...
PT-2021-12266
Name of the Vulnerable Software and Affected Versions IBM Spectrum Scale versions 5.0.4.1 through 5.1.0.3 Description The issue allows a local privileged user to overwrite files due to improper input validation. Recommendations For versions 5.0.4.1 through 5.1.0.3, update to a version outside of...
Security Bulletin: Multiple vulnerabilities affect the IBM Spectrum Scale GUI
Summary Vulnerabilities exist in all levels of IBM Spectrum Scale GUI. A fix for this vulnerability is available. Vulnerability Details CVEID: CVE-2021-29667 DESCRIPTION: IBM Spectrum Scale is potentially vulnerable to CSV Injection. A remote attacker could execute arbitrary commands on the syste...
Security Bulletin: A vulnerability in IBM Spectrum Scale CSI could allow insecure external command execution (CVE-2020-4981)
Summary A security vulnerability has been identified in all levels of IBM Spectrum Scale CSI that could allow insecure external command execution. A fix for this vulnerability is available. Vulnerability Details CVEID: CVE-2020-4981 DESCRIPTION: IBM Spectrum Scale could allow a local privileged...
CVE-2021-29666
IBM Spectrum Scale 5.0.0 through 5.0.5.6 and 5.1.0 through 5.1.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted sessio...
CVE-2021-29667
IBM Spectrum Scale 5.0.0 through 5.0.5.6 and 5.1.0 through 5.1.0.2 is potentially vulnerable to CSV Injection. A remote attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents. IBM X-Force ID: 199403...