PT-2020-18057 · Ibm · Spectrum Scale

Published 2020-05-19 · Updated 2020-05-20 · CVE-2020-4412

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions Spectrum Scale versions 4.2.0.0 through 4.2.3.21 Spectrum Scale versions 5.0.0.0 through 5.0.4.3

Description The file system component is affected by a denial of service security issue. An attacker can force the Spectrum Scale mmfsd/mmsdrserv daemons to unexpectedly exit, impacting the functionality of the Spectrum Scale cluster and the availability of file systems managed by Spectrum Scale.

Recommendations For versions 4.2.0.0 through 4.2.3.21, consider disabling the mmfsd/mmsdrserv daemons as a temporary workaround until a patch is available. For versions 5.0.0.0 through 5.0.4.3, restrict access to the file system component to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2020-4412

Affected Products

Spectrum Scale

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2020-4412 · Security Note
• https://ibm.com/support/pages/node/6209004 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/179987 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-4412 · Vendor Advisory
• https://t.me/cvenotify/3908 · Telegram Post