CVSS: 6.5EPSS: 0%CPEs: 7EXPL: 0CVE-2016-0361
https://notcve.org/view.php?id=CVE-2016-0361
IBM General Parallel File System (GPFS) 3.5 before 3.5.0.29 efix 6 and 4.1.1 before 4.1.1.4 efix 9, when the Spectrum Scale GUI is used with DB2 on Linux, UNIX and Windows, allows remote authenticated users to obtain sensitive information via unspecified vectors, as demonstrated by discovering ADMIN passwords. IBM General Parallel File System (GPFS) 3.5 en versiones anteriores a 3.5.0.29 efix 6 y 4.1.1 en versiones anteriores a 4.1.1.4 efix 9, cuando se utiliza Spectrum Scale GUI con DB2 en Linux, UNIX y Windows, permite a usuarios remotos autenticados obtener información sensible a través de vectores no especificados, como se demuestra descubriendo contraseñas ADMIN. • http://www-01.ibm.com/support/docview.wss?uid=swg21986595 http://www.securityfocus.com/bid/90550 http://www.securitytracker.com/id/1036455 •
CVSS: 7.2EPSS: 0%CPEs: 35EXPL: 0CVE-2016-0263
https://notcve.org/view.php?id=CVE-2016-0263
IBM Spectrum Scale 4.1 before 4.1.1.5 and 4.2 before 4.2.0.2 and General Parallel File System 3.5 before 3.5.0.30 allow local users to gain privileges or cause a denial of service via a crafted mmapplypolicy command. IBM Spectrum Scale 4.1 en versiones anteriores a 4.1.1.5 y 4.2 en versiones anteriores a 4.2.0.2 y General Parallel File System 3.5 en versiones anteriores a 3.5.0.30 permiten a usuarios locales obtener privilegios o provocar una denegación de servicio a través de un comando mmapplypolicy manipulado. • http://www-01.ibm.com/support/docview.wss?uid=ssg1S1005708 http://www.securityfocus.com/bid/90525 http://www.securitytracker.com/id/1036458 • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 8.4EPSS: 0%CPEs: 28EXPL: 0CVE-2016-0392
https://notcve.org/view.php?id=CVE-2016-0392
IBM General Parallel File System (GPFS) in GPFS Storage Server 2.0.0 through 2.0.7 and Elastic Storage Server 2.5.x through 2.5.5, 3.x before 3.5.5, and 4.x before 4.0.3, as distributed in Spectrum Scale RAID, allows local users to gain privileges via a crafted parameter to a setuid program. IBM General Parallel File System (GPFS) en GPFS Storage Server 2.0.0 hasta la versión 2.0.7 y Elastic Storage Server 2.5.x hasta la versión 2.5.5, 3.x en versiones anteriores a 3.5.5 y 4.x en versiones anteriores a 4.0.3, según se distribuye en Spectrum Scale RAID, permite a usuarios locales obtener privilegios a través de un parámetro manipulado en un programa setuid. • http://packetstormsecurity.com/files/137373/IBM-GPFS-Spectrum-Scale-Command-Injection.html http://www-01.ibm.com/support/docview.wss?uid=ssg1S1005875 http://www-01.ibm.com/support/docview.wss?uid=swg1IV84206 http://www.securityfocus.com/archive/1/538620/100/0/threaded http://www.securityfocus.com/bid/91082 http://www.securitytracker.com/id/1036458 • CWE-284: Improper Access Control •
CVSS: 4.0EPSS: 0%CPEs: 4EXPL: 0CVE-2015-7403
https://notcve.org/view.php?id=CVE-2015-7403
IBM Spectrum Scale 4.1.1.x before 4.1.1.3 and General Parallel File System (GPFS) 3.5.x before 3.5.0.29 and 4.1.x through 4.1.0.8 on AIX allow local users to cause a denial of service (incorrect pointer dereference and node crash) via unspecified vectors. IBM Spectrum Scale 4.1.1.x en versiones anteriores a 4.1.1.3 y General Parallel File System (GPFS) 3.5.x en versiones anteriores a 3.5.0.29 y 4.1.x hasta la versión 4.1.0.8 en AIX permite a usuarios locales provocar una denegación de servicio (referencia a puntero incorrecta y caída de nodo) a través de vectores no especificados. • http://www-01.ibm.com/support/docview.wss?uid=ssg1S1005452 http://www-01.ibm.com/support/docview.wss?uid=swg21972152 http://www.securityfocus.com/bid/79805 http://www.securitytracker.com/id/1035094 •
CVSS: 7.2EPSS: 0%CPEs: 28EXPL: 0CVE-2015-4974
https://notcve.org/view.php?id=CVE-2015-4974
IBM General Parallel File System (GPFS) 3.5.x before 3.5.0.27 and 4.1.x before 4.1.1.2 and Spectrum Scale 4.1.1.x before 4.1.1.2 allow local users to obtain root privileges for command execution via unspecified vectors. IBM General Parallel File System (GPFS) 3.5.x en versiones anteriores a 3.5.0.27 y 4.1.x en versiones anteriores a 4.1.1.2 y Spectrum Scale 4.1.1.x en versiones anteriores a 4.1.1.2 permite a usuarios locales obtener privilegios de root para ejecución de comandos a través de vectores no especificados. • http://www-01.ibm.com/support/docview.wss?uid=ssg1S1005366 http://www-01.ibm.com/support/docview.wss?uid=swg21972152 http://www.securityfocus.com/bid/77025 http://www.securitytracker.com/id/1035094 • CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') •