Security Bulletin: A vulnerability in Samba affects IBM Spectrum Scale SMB protocol access method ( CVE-2019-14907)

Summary A Samba vulnerability affects IBM Spectrum Scale SMB protocol access method that could cause denial of service. A fix for this vulnerability is available. Vulnerability Details CVEID: CVE-2019-14907 DESCRIPTION: Samba is vulnerable to a denial of service, caused by an error after a failed...

PT-2020-5527

Name of the Vulnerable Software and Affected Versions IBM Spectrum Scale versions 4.2 through 5.0 Description The issue is related to insufficient checking of unusual or exceptional states in the file system component of IBM Spectrum Scale. This can be exploited by a remote attacker to cause a...

Manually moving backup files between Scale-Out Backup Repository extents

Extent Rebalance is Now Built-In to Veeam Backup & Replication This article was written prior to the release of Veeam Backup & Replication 12. While the procedure may still work in Veeam Backup & Replication 12 and higher, we strongly advise you to instead consider using the built-in rebalancing...

Women in Security: Security Technical Project Manager

We continue to see large-scale online security attacks affecting corporations and public institutions. These attacks are becoming more and more sophisticated, making it harder to protect yourself. The constant evolution of attacks requires innovative solutions that only Akamai can provide...

Imperva Received Top Scores in Gartner’s “Critical Capabilities for Cloud Web Application Firewalls”

The web application landscape is constantly changing, and the tools needed for the best application security protection need to change with the landscape. With Imperva’s recent improvements in API Security, Bot Management, DDoS and Cloud WAF, it’s easy to see why we are among the highest-scored...

Security Bulletin: IBM® Db2® LUW on AIX and Linux Affected by a Vulnerability in IBM® Spectrum Scale (CVE-2019-4558)

Summary Db2 LUW is affected by a vulnerability in IBM® Spectrum Scale Version 5.0.x and 4.2.x that is used by Db2® pureScale™ Feature on AIX and Linux. IBM Spectrum Scale is previously known as General Parallel File System GPFS. Vulnerability Details CVEID: CVE-2019-4558 DESCRIPTION: A security...

Security Bulletin: IBM® Db2® LUW on AIX and Linux Affected by a Vulnerability in IBM® Spectrum Scale (CVE-2018-1783).

Summary Db2 LUW is affected by a vulnerability in IBM® Spectrum Scale Version 4.1.x and 4.2.x that is used by Db2® pureScale™ Feature on AIX and Linux. IBM Spectrum Scale is previously known as General Parallel File System GPFS. Vulnerability Details CVEID: CVE-2018-1783 DESCRIPTION: IBM GPFS IBM...

Security Bulletin: A vulnerability has been identified in IBM Spectrum Scale where remote authenticated attacker can execute arbitrary command(CVE 2019-4715)

Summary A security vulnerability has been identified in all levels of IBM Spectrum Scale that could allow remote authenticated attacker to execute arbitrary command on the system. This vulnerability only affects systems where the SMB protocol is enabled. A fix for this vulnerability is available...

Security Bulletin: Multiple vulnerabilities in Netty affect IBM Transparent Cloud Tiering

Summary There are vulnerabilities in Netty used by IBM Transparent Cloud Tiering. IBM Transparent Cloud Tiering has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2019-9514 DESCRIPTION: Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial o...

Security Bulletin: A vulnerability has been identified in IBM Spectrum Scale where local attacker can execute arbitrary commands on the system (CVE-2019-4664)

Summary IBM Spectrum Scale could allow local attacker to execute specially crafted request for an exploitation of the system. Fix is available for this vulnerability. Vulnerability Details CVEID: CVE-2019-4664 DESCRIPTION: IBM Spectrum Scale could allow a local attacker to execute arbitrary...

Security Bulletin: IBM Spectrum Scale for IBM Elastic Storage Server is affected where the local attacker can obtain root privilege by injecting parameters into setuid files (CVE-2019-4558)

Summary The Elastic Storage Server is affected by a vulnerability in IBM Spectrum Scale where one can obtain root privilege by injecting parameters into setuid files. A fix for this vulnerability is available. Vulnerability Details CVEID: CVE-2019-4558 DESCRIPTION: A security vulnerability has be...

Security Bulletin: A vulnerability has been identified in IBM Spectrum Scale which allows users to embed arbitrary JavaScript code in the Web UI (CVE-2019-4665)

Summary A security vulnerability has been identified in all levels of IBM Spectrum Scale that could allow users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. A fix for this...

Security Bulletin: IBM Transparent Cloud Tiering is affected by Netty vulnerability

Summary The Netty library is vulnerable affecting the IBM Transparent Cloud Tiering. IBM Transparent Cloud Tiering fixed the below CVE. Vulnerability Details CVEID: CVE-2019-16869 DESCRIPTION: Netty before 4.1.42.Final mishandles whitespace before the colon in HTTP headers such as a...

Security Bulletin: IBM Transparent Could Tiering is affected by a vulnerability in Apache Commons Compress (CVE-2019-12402)

Summary Apache Commons Compress is vulnerable to a denial of service which can affect IBM Transparent Could Tiering and addressed the following vulnerability. Vulnerability Details CVEID: CVE-2019-12402 DESCRIPTION: The file name encoding algorithm used internally in Apache Commons Compress 1.15 ...

Security Bulletin: IBM Spectrum Scale Transparent Cloud Tiering is affected by multiple vulnerabilities in IBM® Runtime Environment Java™ Version 8

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 8 used by IBM Spectrum Scale Transparent Cloud Tiering. The IBM Spectrum Scale Transparent Cloud Tiering have addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2019-2762 DESCRIPTION: Vulnerability i...

IBM Spectrum Scale CVE-2019-4558 Local Privilege Escalation Vulnerability

Description IBM Spectrum Scale is prone to a local privilege-escalation vulnerability. An attacker may exploit this issue to gain root privileges. The following IBM products are affected: IBM Spectrum Scale versions 5.0.0.0 through 5.0.3.2 and 4.2.0.0 through 4.2.3.17 are vulnerable. IBM Elastic...

Support Statement - Object Storage Gateway Software

Object Storage Offloading Third-Party Object Storage Offloading Software These third-party applications are designed to help upload files to cloud storage. What is Supported Third-party object storage gateway software is only supported if all backup data written to the repository by Veeam Backup ...

CVE-2019-14849

A vulnerability was found in 3scale before version 2.6, did not set the HTTPOnly attribute on the user session cookie. An attacker could use this to conduct cross site scripting attacks and gain access to unauthorized information...

CVE-2019-4715

IBM Spectrum Scale 4.2 and 5.0 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary commands on the system. IBM X-Force ID: 172093...

CVE-2019-4665

IBM Spectrum Scale 4.2 and 5.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 171247...