CVSS: 7.2EPSS: 0%CPEs: 3EXPL: 0CVE-2015-0197
https://notcve.org/view.php?id=CVE-2015-0197
IBM General Parallel File System (GPFS) 3.4 before 3.4.0.32, 3.5 before 3.5.0.24, and 4.1 before 4.1.0.7 allows local users to obtain root privileges for program execution via unspecified vectors. IBM General Parallel File System (GPFS) 3.4 anterior a 3.4.0.32, 3.5 anterior a 3.5.0.24, y 4.1 anterior a 4.1.0.7 permite a usuarios locales obtener privilegios root para la ejecución de programas a través de vectores no especificados. • http://www-01.ibm.com/support/docview.wss?uid=isg3T1022062 http://www-304.ibm.com/support/docview.wss?uid=swg21902662 http://www.securityfocus.com/bid/73282 http://www.securitytracker.com/id/1032880 • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 10.0EPSS: 0%CPEs: 3EXPL: 0CVE-2015-0198
https://notcve.org/view.php?id=CVE-2015-0198
IBM General Parallel File System (GPFS) 3.4 before 3.4.0.32, 3.5 before 3.5.0.24, and 4.1 before 4.1.0.7 in certain cipherList configurations allows remote attackers to bypass authentication and execute arbitrary programs as root via unspecified vectors. IBM General Parallel File System (GPFS) 3.4 anterior a 3.4.0.32, 3.5 anterior a 3.5.0.24, y 4.1 anterior a 4.1.0.7 en ciertas configuraciones cipherList permite a atacantes remotos evadir la autenticación y ejecutar programas arbitrarios como root a través de vectores no especificados. • http://www-01.ibm.com/support/docview.wss?uid=isg3T1022062 http://www-304.ibm.com/support/docview.wss?uid=swg21902662 http://www.securityfocus.com/bid/73278 http://www.securitytracker.com/id/1032880 • CWE-287: Improper Authentication •