PT-2018-12427 · Ibm · Ibm Spectrum Scale

Published 2018-06-13 · Updated 2019-10-09 · CVE-2018-1431

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions IBM Spectrum Scale versions 4.1.1, 4.2.0, 4.2.1, 4.2.3, and 5.0.0

Description A local attacker could exploit this issue to obtain control of the Spectrum Scale daemon, access and modify files in the Spectrum Scale file system, and possibly gain administrator privileges on the node.

Recommendations For versions 4.1.1, 4.2.0, 4.2.1, 4.2.3, and 5.0.0, at the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Related Identifiers

CVE-2018-1431

Affected Products

Ibm Spectrum Scale

References · 5

• http://ibm.com/support/docview.wss?uid=ssg1S1012049 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-1431 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-1431 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/139240 · Vendor Advisory
• http://securityfocus.com/bid/105546 · Note