CVE-2016-0361 IBM General Parallel File System (GPFS) 3.5 before 3.5.0.29 efix 6 and 4.1.1 before 4.1.1.4 efix 9, when the Spectrum Scale GUI is used with DB2 on Linux, UNIX and Windows, allows remote authenticated...
MediumCVSS 6.5
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
IBM General Parallel File System (GPFS) 3.5 before 3.5.0.29 efix 6 and 4.1.1 before 4.1.1.4 efix 9, when the Spectrum Scale GUI is used with DB2 on Linux, UNIX and Windows, allows remote authenticated users to obtain sensitive information via unspecified vectors, as demonstrated by discovering ADMIN passwords.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm general parallel file system | = 3.5 | No fix listed |
| ibm general parallel file system | = 3.5.0.3 | No fix listed |
| ibm general parallel file system | = 3.5.0.7 | No fix listed |
| ibm general parallel file system | = 3.5.0.9 | No fix listed |
| ibm general parallel file system | = 3.5.0.11 | No fix listed |
| ibm general parallel file system | = 3.5.0.16 | No fix listed |
| ibm general parallel file system | = 4.1.0.1 | No fix listed |
References
- www-01.ibm.com patch vendor-advisory
- 90550 vdb-entry
- 1036455 vdb-entry