IBM Spectrum Scale 安全漏洞

IBM Spectrum Scale is a high-performance shared disk file management solution that gives you fast, reliable access to data from multiple servers. A log casting vulnerability exists in IBM Spectrum Scale 5.0.0 - 5.0.5.4, 5.1.0. A local user can exploit this vulnerability to impact support and...

CVE-2020-4889: Undefined Security Weakness

IBM Spectrum Scale 5.0.0 through 5.0.5.4 and 5.1.0 could allow a local user to poison log files which could impact support and development efforts. IBM X-Force ID: 190971...

Security Bulletin: A vulnerability in IBM Spectrum Scale allows to inject malicious content into command log files (CVE-2020-4889)

Summary A security vulnerability has been identified in all levels of IBM Spectrum Scale FAL that could allow a local attacker to inject malicious content into command log files. A fix for this vulnerability is available. Vulnerability Details CVEID: CVE-2020-4889 DESCRIPTION: IBM Spectrum Scale...

Security Bulletin: Multiple vulnerabilities in samba affect IBM Spectrum Scale SMB protocol access method.

Summary Multiple samba vulnerabilities affect IBM Spectrum Scale SMB protocol access method that could cause denial of service. A fix for these vulnerabilities is available. Vulnerability Details CVEID: CVE-2020-14318 DESCRIPTION: Samba could allow a remote authenticated attacker to obtain...

CVE-2020-4889

IBM Spectrum Scale 5.0.0 through 5.0.5.4 and 5.1.0 could allow a local user to poison log files which could impact support and development efforts. IBM X-Force ID: 190971...

Security Bulletin: A vulnerability has been identified in Apache HttpClient shipped with IBM Spectrum Scale Transparent Cloud Tiering (CVE-2020-13956)

Summary Apache HttpClient is a component shipped with IBM Spectrum Scale Transparent Cloud Tiering. Information about security vulnerabilities affecting Apache HttpClient has been published. CVE-2020-13956 Vulnerability Details CVEID: CVE-2020-13956 DESCRIPTION: Apache HttpClient could allow a...

Security Bulletin: Multiple vulnerabilities in the IBM Java Runtime affect IBM Spectrum Scale Transparent Cloud Tiering (CVE-2020-14577, CVE-2020-14578, CVE-2020-14579)

Summary There are vulnerabilities in the IBM® Runtime Environment Java™ Version 8, which is used by BM Spectrum Scale Transparent Cloud Tiering . These issues were disclosed as part of the IBM SDK, Java Technology Edition Quarterly CPU - Jul 2020 - Includes Oracle Jul 2020 CPU plus one additional...

IBM WebSphere eXtreme Scale 8.6.1 < 8.6.1.4 (6397682)

The version of IBM WebSphere eXtreme Scale installed on the remote host is prior to 8.6.1.4. It is, therefore, affected by a vulnerability as referenced in the 6397682 advisory. - IBM WebSphere eXtreme Scale 8.6.1 stores sensitive information in URL parameters. This may lead to information...

IBM WebSphere eXtreme Scale (Linux)

Binary data ibmwebsphereextremescalenixinstalled.nbin...

CVE-2020-4336

IBM WebSphere eXtreme Scale 8.6.1 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 177932...

Information disclosure

IBM WebSphere eXtreme Scale 8.6.1 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 177932...

CVE-2020-4336

IBM WebSphere eXtreme Scale 8.6.1 is affected by CVE-2020-4336, where sensitive information is stored in URL parameters, enabling potential disclosure if URLs are exposed via logs, referer headers, or browser history. The affected product/version is WebSphere eXtreme Scale 8.6.1; remediation prov...

CVE-2020-4336

IBM WebSphere eXtreme Scale 8.6.1 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 177932...

CVE-2020-4336: Exposure of Sensitive Information to an Unauthorized Actor

IBM WebSphere eXtreme Scale 8.6.1 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 177932...

PT-2021-12122

Name of the Vulnerable Software and Affected Versions: IBM WebSphere eXtreme Scale version 8.6.1 Description: The issue concerns the storage of sensitive information in URL parameters, which may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referr...

IBM WebSphere eXtreme Scale Information Disclosure Vulnerability

IBM WebSphere eXtreme Scale is a distributed caching solution from IBM USA. The product supports dynamic caching, partitioning, replication and management of application data and business logic across multiple servers. An information disclosure vulnerability exists in IBM WebSphere eXtreme Scale...

Security Bulletin: Vulnerability in IBM WebSphere eXtreme Scale Liberty Deployment could expose sensitive information.

Summary Vulnerability in IBM WebSphere eXtreme Scale Liberty Deployment could expose sensitive information. Vulnerability Details CVEID: CVE-2020-4336 DESCRIPTION: IBM WebSphere Extreme Scale stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized...

Security Bulletin: A vulnerability in IBM Spectrum Scale packaged in IBM Elastic Storage Server could cause a denial of service (CVE-2020-4756)

Summary A security vulnerability has been identified in all levels of IBM Elastic Storage Server that could allow a local attacker to cause a denial of service. A fix for this vulnerability is available. Vulnerability Details CVEID: CVE-2020-4756 DESCRIPTION: IBM Spectrum Scale V4.2.0.0 through...

Security Bulletin: Multiple vulnerabilities affect the IBM Elastic Storage System GUI

Summary Vulnerabilities exist in all levels of IBM Elastic Storage System GUI. A fix for this vulnerability is available. Vulnerability Details CVEID: CVE-2020-4748 DESCRIPTION: IBM Spectrum Scale 5.0.0 through 5.0.5.2 is vulnerable to cross-site scripting. This vulnerability allows users to embe...

DEBIAN-CVE-2020-27757

A floating point math calculation in ScaleAnyToQuantum of /MagickCore/quantum-private.h could lead to undefined behavior in the form of a value outside the range of type unsigned long long. The flaw could be triggered by a crafted input file under certain conditions when it is processed by...