PT-2018-14209 · Ibm · Gpfs

Published 2018-10-05 · Updated 2020-08-24 · CVE-2018-1783

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions IBM GPFS versions 4.1.1.0 through 4.1.1.20 IBM GPFS versions 4.2.0.0 through 4.2.3.10 IBM GPFS versions 5.0.0 through 5.0.1.2

Description The issue allows an unprivileged, authenticated user with access to a GPFS node to forcefully terminate GPFS and deny access to data available through GPFS.

Recommendations For IBM GPFS versions 4.1.1.0 through 4.1.1.20, update to a version that includes a fix for this issue. For IBM GPFS versions 4.2.0.0 through 4.2.3.10, update to a version that includes a fix for this issue. For IBM GPFS versions 5.0.0 through 5.0.1.2, update to a version that includes a fix for this issue.

Fix

Related Identifiers

CVE-2018-1783

Affected Products

Gpfs

References · 4

• https://ibm.com/support/docview.wss?uid=ibm10732717 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-1783 · Security Note
• https://osv.dev/vulnerability/CVE-2018-1783 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/148806 · Vendor Advisory