CVE-2018-1431
Severity Score
7.8
*CVSS v3
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
A vulnerability in GSKit affects IBM Spectrum Scale 4.1.1, 4.2.0, 4.2.1, 4.2.3, and 5.0.0 that could allow a local attacker to obtain control of the Spectrum Scale daemon and to access and modify files in the Spectrum Scale file system, and possibly to obtain administrator privileges on the node. IBM X-Force ID: 139240.
Una vulnerabilidad en GSKit afecta a IBM Spectrum Scale 4.1.1, 4.2.0, 4.2.1, 4.2.3 y 5.0.0 y podría permitir que un atacante local obtenga el control del demonio Spectrum Scale, acceda y modifique archivos en el sistema de archivos de Spectrum Scale y, posiblemente, obtenga privilegios de administrador en el nodo. IBM X-Force ID: 139240.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2017-12-13 CVE Reserved
- 2018-06-13 CVE Published
- 2023-03-08 EPSS Updated
- 2024-09-17 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
CAPEC
References (3)
| URL | Tag | Source |
|---|---|---|
| http://www.securityfocus.com/bid/105546 | Third Party Advisory |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://www.ibm.com/support/docview.wss?uid=ssg1S1012049 | 2019-10-09 | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/139240 | 2019-10-09 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Ibm Search vendor "Ibm" | General Parallel File System Search vendor "Ibm" for product "General Parallel File System" | >= 4.1.0.0 <= 4.1.0.8 Search vendor "Ibm" for product "General Parallel File System" and version " >= 4.1.0.0 <= 4.1.0.8" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Spectrum Scale Search vendor "Ibm" for product "Spectrum Scale" | >= 4.1.1.0 <= 4.1.1.19 Search vendor "Ibm" for product "Spectrum Scale" and version " >= 4.1.1.0 <= 4.1.1.19" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Spectrum Scale Search vendor "Ibm" for product "Spectrum Scale" | >= 4.2.0.0 <= 4.2.0.4 Search vendor "Ibm" for product "Spectrum Scale" and version " >= 4.2.0.0 <= 4.2.0.4" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Spectrum Scale Search vendor "Ibm" for product "Spectrum Scale" | >= 4.2.1.0 <= 4.2.1.2 Search vendor "Ibm" for product "Spectrum Scale" and version " >= 4.2.1.0 <= 4.2.1.2" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Spectrum Scale Search vendor "Ibm" for product "Spectrum Scale" | >= 4.2.2.0 <= 4.2.2.3 Search vendor "Ibm" for product "Spectrum Scale" and version " >= 4.2.2.0 <= 4.2.2.3" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Spectrum Scale Search vendor "Ibm" for product "Spectrum Scale" | >= 4.2.3.0 <= 4.2.3.8 Search vendor "Ibm" for product "Spectrum Scale" and version " >= 4.2.3.0 <= 4.2.3.8" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Spectrum Scale Search vendor "Ibm" for product "Spectrum Scale" | >= 5.0.0.0 <= 5.0.0.2 Search vendor "Ibm" for product "Spectrum Scale" and version " >= 5.0.0.0 <= 5.0.0.2" | - |
Affected
| ||||||