CVE-2018-1431 A vulnerability in GSKit affects IBM Spectrum Scale 4.1.1, 4.2.0, 4.2.1, 4.2.3, and 5.0.0 that could allow a local attacker to obtain control of the Spectrum Scale daemon and to access and modify file...
HighCVSS 7.8
EPSS 0.37%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A vulnerability in GSKit affects IBM Spectrum Scale 4.1.1, 4.2.0, 4.2.1, 4.2.3, and 5.0.0 that could allow a local attacker to obtain control of the Spectrum Scale daemon and to access and modify files in the Spectrum Scale file system, and possibly to obtain administrator privileges on the node. IBM X-Force ID: 139240.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm general parallel file system | >= 4.1.0.0, <= 4.1.0.8 | No fix listed |
| ibm spectrum scale | >= 4.1.1.0, <= 4.1.1.19 | No fix listed |
| ibm spectrum scale | >= 4.2.0.0, <= 4.2.0.4 | No fix listed |
| ibm spectrum scale | >= 4.2.1.0, <= 4.2.1.2 | No fix listed |
| ibm spectrum scale | >= 4.2.2.0, <= 4.2.2.3 | No fix listed |
| ibm spectrum scale | >= 4.2.3.0, <= 4.2.3.8 | No fix listed |
| ibm spectrum scale | >= 5.0.0.0, <= 5.0.0.2 | No fix listed |
| ibm spectrum scale | = 4.1.1 | No fix listed |
| ibm spectrum scale | = 4.2.0 | No fix listed |
| ibm spectrum scale | = 4.2.1 | No fix listed |
| ibm spectrum scale | = 4.2.2 | No fix listed |
| ibm spectrum scale | = 4.2.3 | No fix listed |
| ibm spectrum scale | = 5.0.0 | No fix listed |
References
- www.ibm.com vendor-advisory
- 105546 third-party-advisory vdb-entry
- ibm-spectrum-cve20181431-priv-escalation(139240) vdb-entry vendor-advisory