PT-2020-5527 · Ibm · Ibm Spectrum Scale

Published 2020-03-06 · Updated 2020-03-09 · CVE-2020-4217

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions IBM Spectrum Scale versions 4.2 through 5.0

Description The issue is related to insufficient checking of unusual or exceptional states in the file system component of IBM Spectrum Scale. This can be exploited by a remote attacker to cause a denial of service by forcing the mmfsd/mmsdrserv daemons to exit unexpectedly, which impacts the functionality of the Spectrum Scale cluster and the availability of managed file systems.

Recommendations For IBM Spectrum Scale versions 4.2 through 5.0, consider restricting access to the mmfsd/mmsdrserv daemons as a temporary workaround to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Check for Exceptional Conditions

Weakness Enumeration

CWE-754

Related Identifiers

BDU:2021-01042

CVE-2020-4217

Affected Products

Ibm Spectrum Scale

References · 5

• https://osv.dev/vulnerability/CVE-2020-4217 · Vendor Advisory
• https://ibm.com/support/pages/node/5693463 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-4217 · Security Note
• https://bdu.fstec.ru/vul/2021-01042 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/175067 · Vendor Advisory