PT-2015-2600 · Ibm · Ibm Spectrum Scale+1

Published 2015-10-26 · Updated 2016-12-06 · CVE-2015-4981

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM General Parallel File System (GPFS) versions 3.5.x through 3.5.0.26 IBM General Parallel File System (GPFS) versions 4.1.x through 4.1.1.1 IBM Spectrum Scale versions 4.1.1.x through 4.1.1.1

Description The issue is related to the lack of protection for service data in IBM Spectrum Scale and General Parallel File System, allowing local users to obtain sensitive information from system memory.

Recommendations For IBM General Parallel File System (GPFS) versions 3.5.x through 3.5.0.26, update to version 3.5.0.27 or later. For IBM General Parallel File System (GPFS) versions 4.1.x through 4.1.1.1, update to version 4.1.1.2 or later. For IBM Spectrum Scale versions 4.1.1.x through 4.1.1.1, update to version 4.1.1.2 or later.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

BDU:2015-11965

CVE-2015-4981

Affected Products

Ibm General Parallel File System

Ibm Spectrum Scale

References · 6

• http://www-01.ibm.com/support/docview.wss?uid=ssg1S1005366 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-11965 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2015-4981 · Security Note
• http://www-01.ibm.com/support/docview.wss?uid=swg21972152 · Note
• http://securityfocus.com/bid/77027 · Note
• http://securitytracker.com/id/1035094 · Note