PT-2018-13962 · Ibm · Ibm Spectrum Lsf

Ryan Adamson · Publicado 2018-10-11 · Atualizado 2019-10-09 · CVE-2018-1724

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions IBM Spectrum LSF versions 9.1.1 through 9.1.3 IBM Spectrum LSF version 10.1

Description The issue allows a local user to change their job user at job submission time due to improper file permission settings.

Recommendations For IBM Spectrum LSF versions 9.1.1 through 9.1.3, update the file permission settings to prevent local users from changing their job user at job submission time. For IBM Spectrum LSF version 10.1, update the file permission settings to prevent local users from changing their job user at job submission time. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Incorrect Permission

Enumeração de Fraquezas

CWE-732

Identificadores relacionados

CVE-2018-1724

Produtos afetados

Ibm Spectrum Lsf

Referências · 5

• https://www-01.ibm.com/support/docview.wss?uid=ibm10734767 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-1724 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-1724 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/147439 · Aviso do Fabricante
• http://securityfocus.com/bid/106642 · Nota