CVE-2015-1890 /usr/lpp/mmfs/bin/gpfs.snap in IBM General Parallel File System (GPFS) 4.1 before 4.1.0.7 produces an archive potentially containing cleartext keys, and lacks a warning about reviewing this archive to...
LowCVSS 3.5
EPSS 0.97%
- Published
- Updated
- Exploit status
- No public exploit known
Description
/usr/lpp/mmfs/bin/gpfs.snap in IBM General Parallel File System (GPFS) 4.1 before 4.1.0.7 produces an archive potentially containing cleartext keys, and lacks a warning about reviewing this archive to detect included keys, which might allow remote attackers to obtain sensitive information by leveraging access to a technical-support data stream.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm general parallel file system | = 4.1 | No fix listed |
References
- www.ibm.com patch vendor-advisory
- 73918 third-party-advisory vdb-entry